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METHOD FOR SCHEDULING EXECUTIONS OF [PERIODIC AND ASYNCHRONOUS 
REAL-TIME] PROCESSES [HAVING HARD OR SOFT DEADLINES] WITH VARIOUS 
TYPES OF TIMING PROPERTIES AND CONSTRAINTS 



FIELD OF THE INVENTION 

[0001] This invention relates to the field of scheduling methods such as scheduling of 
processes carried out by computer or other systems, and in particular to improved methods 
of scheduling execution of various types of processes with various types of timing properties 
and constraints . 

BACKGROUND TO THE INVENTION 

[0002] In operation of a computer system, executions of certain periodically or asyn- 
chronously occurring real-time processes must be guaranteed to be completed before spec- 
ified deadlines, and in addition satisfying various constraints and dependencies, such as re- 
lease times, offsets, precedence relations, and exclusion relations. 

[0003] Embedded, real-time systems with high assurance requirements often must exe- 
cute many different types of processes with complex timing and other constraints. Some of 
the processes may be periodic and some of them may be asynchronous. Some of the pro- 
cesses may have hard deadlines and some of them may have soft deadlines. For some of the 
processes, especially the hard real-time processes, complete knowledge about their charac- 
teristics can and must be acquired before run-time. For other processes, a prior knowledge of 
their worst case computation time and their data requirements may not be known. 

[0004] Some processes may have complex constraints and dependencies between them. 
For example, a process may need to input data that are produced by other processes. In this 
case, a process may not be able to start before those other processes are completed. Such 
constraints are referred to herein as precedence relations. 

[0005] Exclusion relations may exist between processes when some processes must pre- 
vent simultaneous access to shared resources such as data and I/O devices by other processes. 



For some periodic processes, they may not be able to start immediately at the beginning of 
their periods. In this case, those processes have release time constraints. For some periodic 
processes, the beginning of their first period may not start immediately from time zero, that 
is, the system start time. In this case, those processes have offset constraints. 

[0006] Examples of such systems include plant control systems, aviation control systems, 
air traffic control systems, satellite control systems, communication systems, multimedia sys- 
tems, on-line financial service systems, various embedded systems such as for automotive 
applications, etc. 

[0007] Previous systems and methods related to scheduling executions of real-time pro- 
cesses can be broadly divided into two categories: 

[0008] (a) systems and methods in which determination of the execution schedule of all 
the processes is done entirely at run-time (on-line); and 

[0009] (b) systems and methods in which determination of the execution schedule of the 
majority of the processes is done before run-time (off-line). 

[0010] The vast majority of systems and methods related to scheduling executions of 
real-time processes belong to the first category above. The article "Scheduling Algorithms 
For Multiprogramming in a Hard-Real-Time Environment", by C. L. Liu, and J. W. Layland, 
J. ACM, 20, 46 - 61, 1973 is the best known representative of the priority scheduling ap- 
proach. It assumes that all processes are periodic, and that the major characteristics of the 
processes are known before run-time, that is, the worst case execution times and period are 
known in advance. Fixed priorities are assigned to processes according to their periods; the 
shorter the period, the higher the priority. At any time, the process with the highest priority 
among all processes ready to run, is assigned the processor. 

[0011] A schedulability analysis is performed before run-time based on the known process 
characteristics. If certain equations are satisfied, the actual scheduling is performed during 
run-time, and it can be assumed that all the deadlines will be met at run-time. 

[0012] The article "Priority Ceiling Protocols: An Approach to Real-Time Synchroniza- 
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tion", by L. Sha, R. Rajkumar, and J. R Lehoczky IEEE Trans. On Computers", 39, 1175 
- 1185, 1990, makes the same assumptions as the Liu et al article, except that in addition, 
processes may have critical sections guarded by semaphores, and a protocol is provided for 
handling them. Similar to Rate Monotonic Scheduling, a schedulability analysis is performed 
before run-time based on the known process characteristics; if certain equations are satisfied, 
the actual scheduling is performed during run-time, and it can be assumed that all the dead- 
lines will be met at run-time. 

[0013] Variations on the above basic scheme have been proposed, as surveyed by C. J. 
Fidge in the article "Real-Time Schedulability Tests For Preemptive Multitasking", published 
in Real-Time Systems, vol 14, pp. 61-93, January 1998. 

[0014] Commercial real-time operating systems perform all scheduling activities at run- 
time, during which at each point in time, the process with the highest priority is selected for 
execution. 

[0015] Systems and methods that perform all scheduling activities at run-time, have the 
following disadvantages: 

[0016] (a) High run-time overhead due to scheduling and context switching; 

(b) Difficulty in analyzing and predicting the run-time behavior of the system; 

(c) Difficulty in handling various application constraints and process dependencies; 

(d) Low processor utilization. 

[0017] High run-time overhead is partly due to the fact that embedded, real-time appli- 
cations are becoming more and more complex, with an ever increasing number of processes 
and additional constraints and dependencies between processes. The amount of run-time re- 
sources consumed by the scheduler in order to compute the schedule, grows very rapidly as 
the number of processes and constraints increase. The scheduler often needs to perform many 
time consuming process management functions, such as suspending and activating processes, 
manipulating process queues, etc. In addition, since the priority scheduler does not know the 
schedule before run-time, it has to assume the worst case and save/restore complete contexts 
each time a process is preempted by another process. 
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[0018] Performing all the scheduling at run-time requires the use of complex run-time 
mechanisms in order to achieve process synchronization and prevent simultaneous access to 
shared resources. The run-time behavior of the scheduler can be very difficult to analyze and 
predict accurately. 

[0019] For example, in one published study, fixed priority scheduling was implemented 
using priority queues, where tasks are moved between queues by a scheduler that was released 
at regular intervals by a timer interrupt. It was observed that because the clock interrupt han- 
dler had a priority greater than any application task, even a high priority task could suffer 
long delays while lower priority tasks [Ire] are moved from one queue to another. Accurately 
predicting the scheduler overhead proved to be a very complicated task, and the estimated 
scheduler overhead was substantial, even though it was assumed that the system had a total 
of only 20 tasks, tasks did not have critical sections, and priorities [Ire] are not to change. 
Such difficulties would be many times greater if there existed additional complex application 
constraints that would have to be satisfied by the synchronization mechanism at run-time. 

[0020] The original schedulability analysis given in the aforenoted paper describing the 
PCP protocol by Sha et. al. above, assumed that all tasks are independent tasks, that there are 
no precedence relations, that their release times are equal to the beginning of their periods, 
and all periods have a common start time. It is difficult to extend the schedulability analy- 
sis for priority scheduling to take into account application constraints that frequently exist 
in real-time applications, such as precedence constraints, release times that are not equal to 
the beginning of their periods, offsets, low jitter requirements (limits on the variation in time 
a computed result is output to the external environment from cycle to cycle), etc. Despite 
considerable effort spanning more than a decade to extend the original PCP protocol to han- 
dle additional constraints, not much has been accomplished to this end, as evidenced by the 
absence of methods that can satisfactorily deal with such constraints in the survey by Fidge 
mentioned above. 

[0021] Additional application constraints increase the computational complexity of schedul- 
ing problems, which already have high computational complexity whenever processes con- 
tain critical sections. When all the scheduling is performed at run-time, the scheduler does 
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not have enough time to find solutions for complex problems. Most systems and methods 
that perform all scheduling at run-time, schedule processes according to process priorities 
assigned by the user. However, additional application constraints are most likely to conflict 
with the user assigned priorities. It is not generally possible to map the many different execu- 
tion orderings of processes that are required by the different application constraints in a large 
complex system onto a rigid hierarchy of priorities. 

[0022] It has been suggested that higher priorities be assigned to processes with: shorter 
periods, higher criticality, [loir] lower jitter requirements, precedence constraints, etc. Con- 
sequently, the system designer is faced with the impossible task of trying to simultaneously 
satisfy many different application constraints with one rigid hierarchy of priorities. Because 
of the inherent constraints built into the fixed priority scheduling model, (e.g. fixed priorities) 
and because scheduling is performed at run-time, attempts to take into account additional 
constraints typically result in suggestions that either are only applicable to a few very special 
cases, or make drastically simplifying assumptions, which significantly reduce schedulabil- 
ity, or are extremely complicated, making the run-time behavior of the system very difficult 
to analyze and predict. 

[0023] In general, systems and methods that perform all scheduling activities at run-time 
achieve lower processor utilization than systems and methods that schedule processes before 
run-time. This is largely due to the fact that when all scheduling activities are performed at 
run-time, the scheduler does not have enough time to find good solutions to complex schedul- 
ing problems, and can only afford to use crude, suboptimal methods that do not take into 
account all the available information. 

[0024] Systems that use priority scheduling methods have a much smaller chance of sat- 
isfying timing constraints, because priority-driven methods are only capable of producing a 
very limited subset of the possible schedules for a given set of processes. This severely re- 
stricts the capability of priority-driven systems and methods to satisfy timing and resource 
sharing constraints at run-time. 

[0025] In general, the smaller the set of schedules that can be produced by a scheduling 
system or method, the smaller the chances are of finding a feasible schedule, and, the [loir] 



lower the level of processor utilization that can be achieved. With systems that use optimal 
methods that compute the schedule off-line, it is possible to achieve higher levels of resource 
utilization than those achievable by priority-driven systems. Hence, using priority-driven sys- 
tems may increase the cost of the system to non-competitive levels. 

[0026] When processes are scheduled at run-time, the scheduling strategy must avoid 
deadlocks. In general, deadlock avoidance at run-time requires that the run-time synchro- 
nization mechanism be conservative, resulting in situations where a process is blocked by the 
run-time synchronization mechanism, even though it could have proceeded without causing 
deadlock. This reduces further the level of processor utilization. 

[0027] In contrast to conventional approaches where most of the processes are scheduled 
at run-time, with pre-run-time scheduling the schedule for most of the processes is computed 
off-line; this approach requires that the major characteristics of the processes in the system be 
known, or bounded, in advance. It is known that it is possible to use pre-run-time scheduling 
to schedule periodic processes. [This] One possible technique consists of computing off-line 
a schedule for the entire set of periodic processes occurring within a time period that is equal 
to the least common multiple of the periods of the given set of processes, then at run-time 
executing the periodic processes in accordance with the previously computed schedule. 

[0028] In pre-run-time scheduling, several alternative schedules may be computed off-line 
for a given time period, each such schedule corresponding to a different "mode" of operation. 
A small run-time scheduler can be used to select among the alternative schedules in response 
to external or internal events. This small run-time scheduler can also be used to allocate re- 
sources for asynchronous processes that have not been converted into periodic processes. 

[0029] It is possible to translate an asynchronous process into an equivalent periodic pro- 
cess, if the minimum time [betlen] between two consecutive requests is known in advance, 
and the deadline is not too short. Thus it is also possible to schedule such asynchronous pro- 
cesses using pre-run-time scheduling. See "The Design of Real-Time Programming Systems 
Based On Process Models", Proc. 1984 IEEE Real-time systems Symposium, 5-17, 1984. 

[0030] Systems and methods that perform scheduling before run-time, have the following 



advantages: 



[0031] (a) ability to effectively handle complex constraints and dependencies; 

(b) lower run-time overhead; 

(c) higher processor utilization; and 

(d) ease of predicting the system's behaviour. 

[0032] In the majority of real-time applications, the bulk of the processing is performed 
by periodic processes for which the major characteristics of the processes, including offsets, 
release times, worst-case execution times, deadlines, precedence and exclusion relations, and 
any other constraints, are known before run-time. For asynchronous processes, generally 
their worst-case computation times, deadlines, and the minimum time [betlen] between two 
consecutive requests (interarrival times) are known in advance. Asynchronous processes nor- 
mally are few in number, and often can be converted into new periodic processes that can 
be used to service the corresponding asynchronous process requests in a manner similar 
to polling. Thus it is not only possible, but highly desirable to schedule all the periodic 
processes, including the new periodic processes that are converted from some of the asyn- 
chronous processes, before run-time, rather than scheduling them at run-time. 

[0033] For the processes whose characteristics are known before run-time, such as pe- 
riodic processes, one may realize important advantages if the schedule is computed before 
run-time, instead of waiting until run-time to schedule them. This is because when schedul- 
ing is done before run-time, there is almost no limit on the running time of the scheduler, 
optimal scheduling methods can be used to maximize the possibility of finding a feasible 
schedule for the set of processes to be scheduled and to handle complex constraints and de- 
pendencies. In contrast, when processes are scheduled at run-time, the time available to the 
scheduler is very limited. This limits the ability of the scheduler to find a feasible schedule 
and to take into account the different types of constraints and knowledge about the system 
processes. Once the schedule for the periodic processes has been defined before run-time, the 
run-time scheduler can also use this information to schedule asynchronous processes more 
efficiently. 

[0034] Other reasons for performing scheduling before run-time include: this greatly re- 
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duces the run-time resource requirements needed for scheduling and context switching. With 
pre-run-time scheduling, it is possible to avoid using sophisticated run-time synchronization 
mechanisms by directly defining precedence relations and exclusion relations on pairs of pro- 
cess segments to achieve process synchronization and prevent simultaneous access to shared 
resources. Because the schedule is known in advance, automatic code optimization is pos- 
sible; one can determine in advance the minimum amount of information that needs to be 
saved and restored, and one can switch processor execution from one process to another pro- 
cess through very simple mechanisms such as procedure calls, or simply by concatenating 
code when no context needs to be saved or restored, which greatly reduces the amount of 
run-time overhead. 

[0035] When the use of sophisticated run-time synchronization mechanisms is avoided, 
the benefits are multi-fold: not only is the amount of run-time overhead reduced, but it is 
also much easier to analyze and predict the run-time behavior of the system. Compared with 
the complex schedulability analysis required when run-time synchronization mechanisms are 
used, it is much more straightforward to verify that all processes will meet their deadlines 
and that all the additional application constraints will be satisfied in an off-line computed 
schedule. 

[0036] In recent years, there has been an increased interest in systems and methods for 
the purpose of automating the process of pre-run-time scheduling, as described in the arti- 
cle by S.R. Faulk and D.L. Parnas "On Synchronization in Hard-Real-time Systems", Com- 
mun. ACM vol 31, pp.274-287, March, 1988. Cyclic executives, a form of pre-run-time 
scheduling, have been used in safety critical systems, e.g. as described by G.D. Carlow in 
the article "Architecture of the Space Shuttle Primary Avionics Software System", Commun. 
ACM, Sept. 1984. However, in the past, cyclic executives have mainly been constructed by 
hand, and are difficult to construct and maintain. In the aforenoted article by A.K. Mok, a 
technique for transforming an asynchronous process into an equivalent periodic process was 
introduced. Methods for solving the problem of scheduling processes with release times, 
deadlines, exclusion and precedence relations are given in the article by J.Xu and D.Parnas 
in the articles "Scheduling Processes with Relase Times, Deadlines, Precedence and Exclusi- 
on Relations", IEEE Trans, on Software Engineering, vol 16, pp 360-369, Mar. 1990, by 



J.Xu and D.L. Parnas in "Pre-run-time Scheduling of Processes with Exclusion Relations on 
Nested or Overlapping Critical Sections", Proc. Eleventh Annual IEEE International Phoenix 
Conference on Computers and Communications, IPCCC-92, Scottsdale, Arizona, April 1-3, 
1992, by J.Xu in "Multiprocessor Scheduling of Processes with Release Times, Deadlines, 
Precedence and Exclusion Relations", IEEE Trans, on Software Engineering, vol 19, pp 139- 
154, Feb. 1993, and by J.Xu and D.L. Parnas in "On Satisfying Timing Constraints in Hard- 
Real-Time Systems", IEEE Trans, on Software Engineering, vol 19, ppl-17, Jan. 1993, 
which are incorporated herein by reference. 

[0037] However, until now, unsolved problems have been main obstacles to fully automat- 
ing the process of constructing scheduling systems that combine the pre-run-time scheduling 
of periodic processes with the run-time scheduling of asynchronous processes, as follows: 

[0038] (1) Previously there did not exist any system or method that integrates the run- 
time scheduling of asynchronous processes with the pre-run-time scheduling of periodic pro- 
cesses, that could effectively satisfy exclusion relations, precedence relations, offsets and 
release times constraints between the periodic processes, as well as any exclusion relation 
between a periodic process and an asynchronous process, and any exclusion relation between 
two asynchronous processes, while making efficient use of available processor capacity, and 
maximizing the chances of satisfying all the timing constraints. 

[0039] Previous systems and methods for scheduling periodic processes and asynchronous 
processes, either perform all the scheduling activities at run-time, or assume that any process 
can be preempted by any other process at any time (no exclusion relations can be enforced, 
so one cannot prevent certain data inconsistencies that are caused by more than one process 
simultaneously accessing shared data), or assume that all aperiodic processes have soft dead- 
lines, or assume that all processes are non-preemptable, which reduces the system's flexibility 
in meeting deadlines, or use ad hoc schemes that do not make efficient use of available pro- 
cessor capacity, and reduce the chances of satisfying all the timing constraints. Examples of 
such systems and methods are described in the articles "A Reservation-based Algorithm for 
Scheduling Both Periodic and Aperiodic Real-time Tasks", by K.G. Shin and Y.C. Chang, 
IEEE Trans, on Computers, vol 44, pp. 1405-1419, Dec. 1995, "An Optimal Algorithm 
For Scheduling Soft Aperiodic Tasks in Dynamic-Priority Preemptive Systems", by I. Ripoli, 
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A. Crespo and A. Garcia-Fornes, IEEE Trans, on Software Eng., vol 23, pp. 388-400, June 
1997, and "The Deferrable Server Algorithm For Enhanced Apriodic Responsiveness in Hard 
Real-Time Environments", IEEE Trans, on Computers, vol 44, pp.73-91, Jan 1995. 

[0040] (2) Previously there did not exist any system or method for systematically ad- 
justing the period lengths of periodic processes, such that the adjusted period lengths are 
sufficiently close to the original period lengths, to satisfy the processor utilization level re- 
quired by the application, and maximize the chances of finding a feasible schedule, while at 
the same time ensuring that the adjusted period lengths are as closely harmonically related to 
each other (having a smaller LCM value) as possible, in order to reduce the schedule length 
and the number of instances of new processes, and reduce storage requirements and system 
overhead. 

[0041] Previous systems and methods use ad hoc methods that do not make the most ef- 
ficient use of available processor capacity. For example, in cyclic executives, each periodic 
application task is required to complete within a fixed size frame, which is of the same size 
for all periodic application tasks. Such arbitrary constraints seriously restrict the system's 
ability to meet complex timing constraints. 

[0042] (3) Previously there did not exist any system or method for systematically deter- 
mining which asynchronous processes should be converted into new periodic processes, and 
which asynchronous processes should remain asynchronous, based on whether the ratio of 
the processor capacity that needs to be reserved for the new periodic process, to the processor 
capacity that needs to be reserved for the asynchronous process if unconverted, exceeds a 
specified threshold. 

[0043] Another embodiment of the present invention provides a system and methods for 
systematically adjusting the period lengths of periodic processes, such that the adjusted period 
lengths are sufficiently close to the original period lengths, to satisfy the processor utilization 
level required by the application, and maximize the chances of finding a feasible schedule, 
while at the same time ensuring that the adjusted period lengths are as closely harmonically 
related to each other (having a smaller LCM value) as possible, in order to reduce the sched- 
ule length and the number of instances of new processes, and reduce storage requirements 
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and system overhead. 

[0044] There are certain asynchronous processes that cannot be converted into periodic 
processes at all, or if converted, may take up far too much processor capacity compared with 
allowing them to remain asynchronous. For example, an asynchronous process with a very 
short deadline, a short worst-case execution time, and with long interarrival times, could re- 
quire that a overly high proportion, sometimes even exceeding one hundred percent, of the 
processor's capacity be reserved for that one single process if that process is converted into a 
periodic process for which it is guaranteed to meet it's deadline. But that same process, may 
require far less processor capacity be reserved for it, if it was not converted into a periodic 
process, and scheduled for execution at run-time as soon as it arrives in the system. 

[0045] Previous systems and methods either indiscriminately schedule every asynchronous 
process at run-time as soon as it arrives in the system, or indiscriminately try to convert every 
asynchronous process into a periodic process; or rely on ad hoc rules of thumb. 

[0046] (4) Previously there did not exist any system or method for systematically con- 
verting a given set of asynchronous processes into a set of new periodic processes that could 
make the most efficient use of available processor capacity, and maximize the chances of 
satisfying all the timing constraints. 

[0047] In the aforenoted article by A.K. Mok, a technique for converting one single asyn- 
chronous process into a periodic process was described. However, the technique described 
in the Mok article did not consider the case of non-zero offsets, that is, non-zero intervals 
between time 0, that is, the system start time, and the beginning of their first periods. If only 
zero offsets are allowed, the chances of satisfying all the given timing constraints is decreased 
considerably. Furthermore, the described technique only deals with one process. When more 
than one process must be converted into periodic processes, the new periodic processes may 
have timing conflicts with each other and with the original set of asynchronous and periodic 
processes. For example, a direct application of the above technique might result in more than 
one periodic process each having a release time of zero and a deadline equal to the computa- 
tion time. 
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[0048] Previous systems and methods use ad hoc methods that do not make the most ef- 
ficient use of available processor capacity. For example, in cyclic executives, each periodic 
application task is required to complete within a fixed size frame, which is of the same size 
for all periodic application tasks. Such arbitrary constraints seriously restrict the system's 
ability to meet complex timing constraints. 

SUMMARY OF THE INVENTION 

[0049] An embodiment of the present invention provides a system and method in which 
pre-run-time scheduling techniques are combined with run-time scheduling techniques, where 
pre-run-time scheduling is used for scheduling the executions of periodic processes, includ- 
ing new periodic processes converted from a subset of the asynchronous processes, in order 
to satisfy complex relations and constraints such as exclusion relations, precedence relations, 
and offset constraints, release time constraints defined on the periodic processes, and any 
exclusion relation [betlen] between a periodic process and an asynchronous process, and any 
exclusion relation between two asynchronous processes, and deadline constraints of all peri- 
odic processes, while run-time scheduling is used to schedule a subset of the asynchronous 
processes that would have consumed too much processor capacity if converted into periodic 
processes, so that efficient use is made of available processor capacity, and the chances of 
satisfying all the timing constraints of all processes is increased as much as possible. 

[0050] In accordance with another embodiment, a pre-run-time scheduler may use exist- 
ing methods that statically schedules a set of processes (including manual methods to satisfy 
any special requirements if necessary), to construct a feasible pre-run-time schedule in which 
processor capacity is reserved in the form of time slots in the pre-run-time schedule for each 
periodic process. The time slot for each periodic process also includes "room" for the execu- 
tion of asynchronous processes that have less latitude than that periodic process in meeting 
their respective deadlines, to allow such asynchronous processes to preempt the execution 
of that periodic process at run-time. The pre-run-time scheduler adjusts the lengths of the 
periods using specified parameters which control the balance between the utilization level 
and the length of the pre-run-time schedule. The pre-run-time scheduler is able to schedule 
periodic processes that have offsets, i.e., intervals between the start of a periodic process' 
first period and time zero, that is, the system's start time, and is able to take advantage of 
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any flexibility in periodic process offsets to increase schedulability. The pre-run-time sched- 
uler thereby is able to guarantee that every periodic process will always be able to meet 
its deadline, while providing good response times for asynchronous processes, without re- 
quiring any change in the methods used in any of the other parts, steps or embodiments of 
the present invention. The system and methods have the flexibility to employ sophisticated 
static scheduling methods to satisfy complex relations and constraints, such as exclusion re- 
lations, precedence relations, offsets and release times defined on the periodic processes, and 
also have the flexibility to incorporate and take advantage of any future new static schedul- 
ing method for satisfying any additional desired constraints among the most important and 
numerous type of processes in real-time applications, the periodic processes, while making 
efficient use of available processor capacity, and increasing as much as possible the chances 
of satisfying the timing constraints all the processes. Thus the present invention is able to sat- 
isfy more complex application constraints and achieve higher chances of satisfying complex 
application constraints on periodic processes than previous systems and methods. 

[0051] In accordance with an embodiment of the invention, a run-time scheduler uses 
the information about the beginning times and end times of the time slots reserved for the 
execution of periodic processes (including those new periodic processes that were converted 
from asynchronous processes) in the pre-run-time schedule, as well as the a priori knowledge 
of the processes characteristics, to make more informed decisions and satisfy any exclusion 
relation between a periodic process and an asynchronous process, and any exclusion relation 
[betlen] between two asynchronous processes, while making efficient use of available pro- 
cessor capacity, and achieving higher chances of satisfying all the timing constraints of the 
periodic processes, when scheduling the execution of asynchronous processes. For example, 
an embodiment of the present invention makes it possible to completely avoid blocking of a 
periodic process with a shorter deadline by an asynchronous process with a longer deadline, 
thus achieving higher schedulability of periodic processes than previous systems and meth- 
ods that schedule all processes at run-time. 

[0052] In accordance with another embodiment, a run-time scheduler can use the infor- 
mation about the beginning times and end times of the time slots reserved for the execution of 
periodic processes (including those new periodic processes that were converted from asyn- 
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chronous processes) in the pre-run-time schedule, as well as the a priori knowledge of the 
processes characteristics. A significant portion of the parameters used by the asynchronous 
process scheduler to make scheduling decisions are known before run-time so it is possible 
to pre-compute major portions of the conditions that are used for decision making. Hence 
the amount of computation that needs to be performed for scheduling purposes at run-time 
can be minimized, while making efficient use of available processor capacity, and increasing 
as much as possible the chances of satisfying all the timing constraints of the asynchronous 
processes. For example, an embodiment of the present invention makes it possible to create 
before run-time, a table of "safe starting time intervals" for each asynchronous process, and 
achieve [loir] lower run-time overhead than previous systems and methods by allowing the 
asynchronous processes to be scheduled by simple table lookup. 

[0053] In accordance with another embodiment of the invention, bounds on the worst- 
case response times of asynchronous processes are computed, that are more accurate (tighter) 
than that achievable with previous systems and methods, by using a simulation procedure that 
takes into account the beginning times and end times of the time slots reserved for the execu- 
tion of periodic processes including those new periodic processes that were converted from 
asynchronous processes) in the pre-run-time schedule, as well as the a priori knowledge of 
the processes characteristics, when simulating all possible worst-case scenarios of the execu- 
tions of each asynchronous process. 

[0054] In accordance with another embodiment, a system and methods can schedule the 
executions of both periodic and asynchronous real-time processes with hard or soft deadlines, 
with different a priori knowledge of the process characteristics, and with constraints and de- 
pendencies, such as offsets, release times, precedence relations, and exclusion relations[, in 
real-time on a single processor]. This exploits to a maximum extent any knowledge about 
processes' characteristics that are available to the scheduler both before run-time and dur- 
ing run-time, so that processor capacity is used to satisfy the constraints and dependencies 
of periodic and asynchronous processes with hard deadline process as a first priority. Then 
any remaining processor capacity is used to guarantee that processes with soft deadlines and 
known characteristics will also be completed before pre-determined time limits as a second 
priority. Then any remaining processor capacity is used to execute any asynchronous process 
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with unknown characteristics on a "best-effort" basis. 

[0055] In accordance with another embodiment, a system and methods schedule the ex- 
ecutions of both periodic and asynchronous real-time processes with hard or soft deadlines, 
with different a priori knowledge of the process characteristics, and with constraints and de- 
pendencies, such as offsets, release times, precedence relations, and exclusion relations[, in 
real-time on a single processor]. This exploits to a maximum extent any knowledge about 
processes' characteristics that are available to the scheduler both before run-time and during 
run-time, in order to: 

[0056] (a) effectively handle complex application constraints and dependencies between 
the real-time processes; 

(b) minimize run-time overhead; 

(c) make the most efficient use of available processor capacity; 

(d) maximize the chances of satisfying all the timing constraints; 

(e) provide firm and tight response time guarantees for all the processes whose character- 
istics are known before run-time; and 

(f) make it easier to verify that all timing constraints and dependencies will always be sat- 
isfied. 

[0057] Thus the present invention is able to schedule a wider variety of processes with a 
wider variety of constraints compared with previous systems and methods. 

[0058] In accordance with another embodiment, which asynchronous processes should 
be converted into new periodic processes [ is automatically determined], and which asyn- 
chronous processes should remain asynchronous, is automatically determined. This is based 
on whether the ratio of the processor capacity that needs to be reserved for the new periodic 
process, to the processor capacity that needs to be reserved for the asynchronous process if 
unconverted, exceeds a [user or otherwise determined] specified threshold. 

[0059] An embodiment of the invention systematically converts a given set of asyn- 
chronous processes into a set of new periodic processes that could make the most efficient use 
of available processor capacity, and increase as much as possible the chances of satisfying all 
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the timing constraints. 

[0060] All of the above can be achieved while the process of constructing scheduling sys- 
tems that combine pre-run-time scheduling with run-time scheduling of periodic and asyn- 
chronous processes is fully automated, while the most efficient use of available processor 
capacity is achieved, the chances of satisfying all the timing constraints is increased as much 
as possible. Thus the present invention can achieve a much higher degree of automation, and 
substantially reduce the cost of designing the system and of making changes to the systems 
to meet new requirements, reduce the chances of errors, as compared with previous systems 
and methods that schedule processes before run-time. 

[0061] An embodiment of the present invention provides a system and methods for schedul- 
ing execution of both periodic and asynchronous real-time processes with hard or soft dead- 
lines, with different a priori knowledge of the process characteristics, such that complex rela- 
tions and constraints, such as exclusion relations, precedence relations, offset constraints and 
release time constraints defined on the hard deadline periodic processes, and any exclusion 
relation between a hard deadline periodic process and a hard deadline asynchronous process, 
and any exclusion relation between two hard deadline asynchronous processes, and deadline 
constraints of all hard deadline processes, will be satisfied[ on a single processor]. 

[0062] An embodiment of the present invention integrates pre-run-time scheduling with 
run-time scheduling to guarantee that the executions of the processes will satisfy all the spec- 
ified relations and constraints. Whenever a new set of processes arrives in the system, the 
system schedules their executions in two phases: a pre-run-time (off-line) phase performed 
by a pre-run-time scheduler, and a run-time (on-line) phase performed by a run-time sched- 
uler. 

[0063] In accordance with an embodiment of the invention, in each pre-run-time phase, 
the pre-run-time scheduler executes five steps, as follows: 

[0064] In Step 1, the pre-run-time scheduler divides asynchronous processes with hard 
deadlines and known characteristics, referred to herein as A-h-k processes, into two sub- 
sets. One subset of asynchronous processes, referred to herein as A-h-k-p processes, are 
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converted into new periodic processes by the pre-run-time scheduler before run-time. When 
the pre-run-time scheduler converts an asynchronous process into a new periodic process, it 
prevents possible timing conflicts with other periodic and asynchronous processes, by reserv- 
ing enough "room" (time) prior to each new periodic process's deadline, to accommodate 
the computation times of all the periodic and asynchronous processes that have less latitude 
in meeting their deadlines, to allow such processes to preempt that new periodic process if 
possible at run-time. The processes in the other subset of asynchronous processes, referred 
to herein as A-h-k-a, remain asynchronous and are scheduled by the run-time scheduler at 
run-time. The pre-run-time scheduler reserves processor capacity for A-h-k-a processes by 
adding the computation time of each A-h-k-a process to the computation time of every peri- 
odic process that has a greater latitude in meeting its deadline than that A-h-k-a process, to 
allow each A-h-k-a process to preempt the execution of any such periodic process if possible 
at run-time. 

[0065] Whether each asynchronous process is converted into a new periodic process or 
not, is determined based on whether the ratio of the processor capacity that needs to be re- 
served for the new periodic process, to the processor capacity that needs to be reserved for 
the asynchronous process if unconverted, exceeds a [user or otherwise] specified threshold. 

[0066] In Step 2, the pre-run-time scheduler determines the schedulability of the set of 
all periodic processes with hard deadlines and known characteristics, referred to herein as 
P-h-k processes, which also include the new periodic processes converted from A-h-k-p pro- 
cesses. The pre-run-time scheduler constructs a pre-run-time schedule in which one or more 
time slots are reserved for the execution of every P-h-k process, including every new P-h-k 
process converted from an A-h-k-p process. The time slots reserved for each P-h-k process 
also include time reserved for the executions of all A-h-k-a processes that have less latitude 
in meeting their deadlines than that P-h-k process, and which may preempt the execution of 
that P-h-k process. The pre-run-time scheduler adjusts the lengths of the periods using for 
example user or otherwise specified parameters which control the balance between the uti- 
lization level and the length of the pre-run-time schedule. 

[0067] The pre-run-time scheduler is able to schedule periodic processes that have offsets, 
i.e., intervals between the start of a periodic process' first period and time zero. The pre- 
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run-time scheduler takes advantage of any flexibility in periodic process offsets to increase 
schedulability. An embodiment of the present invention preferably allows the pre-run-time 
scheduler to use existing methods (including manual methods) which statically schedule set 
of processes, to construct the pre-run-time schedule of periodic processes in Step 2 and in 
Step 4 (to be described below), without requiring any change in the methods used in any 
of the other steps of the present invention. This allows the system and methods to have the 
flexibility to incorporate and take advantage of any future new static scheduling method for 
satisfying any additionally desired constraints among the most important and numerous type 
of processes in real-time applications, the periodic processes. 

[0068] The pre-run-time scheduler includes a function "adjustperiod" which uses a sorted 
list of reference periods to adjust the length of the period of each periodic process. Each 
reference period is equal to 2 l * V * 5* * l l * 1 1^, . . ., for some integers i, j, k, 1, f, . . . where 
0 < i < exp2, 0<j< exp3, 0<k< exp5 7 0 < / < expl, 0<f< expll, . . .. exp2, exp3, 
exp5, exp7, expl 1, . . ., are the upperbounds on the exponents i, j, k, 1, f, . . that are applied 
to the prime numbers 2, 3, 5, 7, 11, . . .. Application dependent parameters are used to fine 
tune the exponent upperbounds which control the balance between the utilization level and 
the length of the pre-run-time schedule. 

[0069] In Step 3, the pre-run-time scheduler uses knowledge about the time slots reserved 
for the P-h-k processes in the pre-run-time schedule, to determine, before run-time, the worst- 
case response times of all A-h-k-a processes. The pre-run-time scheduler preferably uses one 
of two methods, one a formula, the other a simulation procedure, for determining the worst- 
case response time of each A-h-k-a process. The pre-run-time scheduler verifies the schedu- 
lability of each A-h-k-a asynchronous process by checking whether its deadline is greater 
than or equal to its worst-case response time. Thus, the pre-run-time scheduler provides an a 
priori guarantee that all periodic and asynchronous processes with hard deadlines and known 
characteristics will always meet their deadlines. 

[0070] In Step 4, the pre-run-time scheduler determines the schedulability of all the pe- 
riodic processes with soft deadlines and known characteristics, called P-s-k processes, under 
the condition that all the P-h-k processes and A-h-k-a processes that [Ire] are guaranteed to 
be schedulable in the previous steps are still schedulable. The pre-run-time scheduler re- 
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constructs the pre-run-time schedule in which one or more time slots are reserved for the 
execution of every P-h-k process (including every new P-h-k process converted from an A- 
h-k-p process), and for every P-s-k process. The time slots reserved for each P-h-k or P-s-k 
process also include time reserved for the executions of all A-h-k-a processes that have dead- 
lines that are shorter than that P-h-k or P-s-k process' deadline, and which may preempt the 
execution of that P-h-k or P-s-k process. The pre-run-time scheduler uses the methods in the 
previous step that take into account knowledge about the time slots reserved for the P-h-k and 
P-s-k processes in the pre-run-time schedule to determine again, before run-time, the worst- 
case response times of every A-h-k-a process. 

[0071] In Step 5, the pre-run-time scheduler preferably uses knowledge about the time 
slots reserved for the P-h-k and P-s-k processes in the pre-run-time schedule to determine, 
before run-time, the worst-case response times of asynchronous processes with soft deadlines 
and known characteristics, i.e., A-s-k processes. 

[0072] At the end of the pre-run-time phase, a feasible pre-run-time schedule for all the 
periodic processes with known characteristics [should be] will have been constructed, while 
the worst-case response times of all the asynchronous processes with known characteristics 
[should be] will have been determined. 

[0073] During the run-time phase, a run-time scheduler uses knowledge about the time 
slots reserved for the periodic processes in the pre-run-time schedule to schedule the exe- 
cutions of all the periodic and asynchronous processes, that is, the P-h-k processes (includ- 
ing every new P-h-k process converted from an A-h-k-p process), P-s-k processes, A-h-k-a 
processes, A-s-k processes, as [111] well as asynchronous processes with soft deadlines and 
unknown characteristics (referred to herein as A-s-u processes), in a way that guarantees that 
every periodic process's execution will complete before the end of that periodic process's 
time slot in the pre-run-time schedule, and all the asynchronous processes with soft deadlines 
and known characteristics, are guaranteed to be completed within the worst-case response 
time pre-determined in Step 4 and Step 5 after their arrival, so that all the constraints and 
dependencies of all processes with known characteristics will always be satisfied. The run- 
time scheduler, can use the information about the beginning times and end times of the time 
slots reserved for the execution of periodic processes (including those new periodic processes 
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that were converted from asynchronous processes) in the pre-run-time schedule, as well as 
the a priori knowledge of the processes characteristics, to pre-compute major portions of the 
conditions that are used for decision making, hence the amount of computation that needs to 
be performed for scheduling purposes at run-time can be minimized. 

[0074] For example, the present invention makes it possible to create before run-time, a 
table of "safe starting time intervals" for each asynchronous process, and achieve lower run- 
time overhead than previous systems and methods by allowing the asynchronous processes 
to be scheduled by simple table lookup. 

[0075] A-s-u processes are scheduled at run-time on a "best-effort" basis using the re- 
maining processor capacity. 

[0076] The present invention exploits to a maximum extent any knowledge about the char- 
acteristics that are available to the system both before run-time and during run-time, in order 
to: 

[0077] (a) effectively handle complex application constraints and dependencies between 
the real-time processes; 

(b) minimize run-time overhead; 

(c) maximize the chances of being able to guarantee that all the processes with hard deadlines 
will always meet their deadlines; 

(d) provide firm and tight response time guarantees for all the processes whose characteristics 
are known before run-time; and 

(e) make it easier to verify that all timing constraints and dependencies will always be satis- 
fied. 

[0078] It is believed that as compared with previous systems and methods that perform 
all scheduling activities at run-time, for most real-time applications, the present invention is 
better suited to meeting the above for the following reasons: 

[0079] (1) In most real-time applications the bulk of the computation is usually performed 
by periodic processes for which the characteristics are known a priori. Complex constraints 
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and dependencies are normally defined on the periodic processes. In the present invention, 
all the periodic processes are scheduled before run-time, there is practically no limit on the 
time that can be used for scheduling the periodic processes. This allows the use of better 
methods to handle a great variety of application constraints and dependencies, and thus can 
achieve higher schedulability for the most important and most numerous type of processes in 
real-time applications. 

[0080] (2) The run-time overhead required for scheduling and context switching is much 
smaller than that of the prior art. 

[0081] (3) The number of asynchronous processes that the run-time scheduler needs to 
schedule should be small, as in most real-time applications. In most real-time applications 
the number of asynchronous processes with hard deadlines is usually small. 

[0082] (4) A significant portion of asynchronous processes can be transformed into pe- 
riodic processes, if desired by the user, when using the present invention. For those asyn- 
chronous processes that are not transformed into periodic processes, their interarrival times 
are likely to be long. 

[0083] (5) Most of the important scheduling decisions have already been determined be- 
fore run-time. In particular, the relative ordering of all the periodic processes was determined 
before run-time when the pre-run-time schedule was computed. 

[0084] (6) A significant portion of the parameters used by the run-time scheduler to make 
scheduling decisions for asynchronous processes, are known before run-time, so that major 
portions of the conditions that are used for decision making can be pre-computed, and the 
amount of computation that needs to be performed for scheduling asynchronous processes at 
run-time can be minimized. 

[0085] (7) From the pre-run-time schedule, it becomes known in advance exactly which 
periodic process may preempt which other periodic process at run-time. Thus one can use 
this information to minimize the amount of context switching. 

[0086] (8) Once the pre-run-time schedule has been determined for all the periodic pro- 
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cesses, the run-time scheduler can use this knowledge to achieve higher schedulability for the 
small number of asynchronous processes that needs to be scheduled at run-time. 

[0087] (9) The run-time scheduler can use knowledge about the pre-run-time schedule to 
schedule asynchronous processes more efficiently, e.g., it would be possible to completely 
avoid blocking of a periodic process with less latitude in meeting its deadline by an asyn- 
chronous process with greater latitude. 

[0088] (10) When determining the worst-case response times of asynchronous processes, 
overly pessimistic assumptions need not be made, e.g., it need not be assumed that for each 
process, all the periodic processes with less latitude in meeting their deadlines can arrive at 
the same time to delay that process. Thus tighter worst-case response times for asynchronous 
processes can be achieved. 

[0089] (11) Using the present invention, verifying that all timing constraints will always 
be satisfied is much easier. 

[0090] (12) Using the present invention, it becomes straightforward to verify that all the 
timing constraints and dependencies between the periodic processes are satisfied in a pre-run- 
time schedule. 

[0091] (13) When using the technique of pre-run-time scheduling, timing constraints and 
dependencies are directly "embedded" in the pre-run-time schedule, thus for the majority of 
the processes, the use of complicated run-time synchronization mechanisms for which it is 
often extremely difficult to obtain reasonable and accurate execution time bounds, can be 
avoided. 

[0092] (14) The number of asynchronous processes is reduced, and the ordering of the 
periodic processes is fixed in the pre-run-time schedule. This significantly reduces the com- 
plexity of verifying that the asynchronous processes will meet timing constraints. 

[0093] In accordance with another embodiment of the invention, a method of scheduling 
executions of both periodic and asynchronous real-time processes having hard or soft dead- 
lines, comprises automatically generating a pre-run-time schedule comprising mapping from 
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a specified set of periodic process executions to a sequence of time slots on a time axis, each 
of the time slots having a beginning time and an end time, reserving each one of the time 
slots for execution of one of the periodic processes, a difference between the end time and the 
beginning time of each of the time slots being sufficiently long that execution of all of the pe- 
riodic processes, including satisfaction of predetermined constraints and relations comprising 
at least one of release time, worst-case computation time, period, deadline, deadline nature, 
offset and permitted range of offset constraints, and precedence and exclusion relations and 
criticality levels can be completed between the beginning time and end time of respective 
time slots, and executing the processes in accordance with the schedule during run-time of 
the processor. 

[0094] In accordance with another embodiment, a method for automatically adjusting 
lengths of periods of a predetermined set of periodic processes, comprises storing and sort- 
ing a list of reference periods, setting the length of the period of each periodic process to 
the length of the largest reference period that is no larger than an original period of the peri- 
odic process to form adjusted periods, and storing the adjusted periods for subsequent use in 
scheduling executions of the periodic processes. 

[0095] In accordance with another embodiment, a method of processing a plurality of 
processes, some of which are periodic and some of which are asynchronous, comprises: 

(i) prior to executing the processes on a processor: 

(a) determining which asynchronous processes have less flexibility in meeting their dead- 
lines than [any] which of the periodic processes, 

(b) adding the execution time of each of the less flexible asynchronous processes to the 
execution time of each of the more flexible periodic [periodic] processes, 

(c) scheduling each of the periodic processes into time slots, 

(ii) and during run-time of the processor: 

(d) executing the periodic processes according to the schedule, interrupting when possible 
any of the more flexible periodic [process] processes to execute [an of said] any of the less 
flexible asynchronous processes for which a request to execute has been received by the 
processor, 

(e) on receiving a request to execute an asynchronous process which has greater or equal 
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flexibility in meeting their deadlines than any of the periodic processes, scheduling the re- 
questing asynchronous process at a time which will not conflict with execution and comple- 
tion of any of the less flexible periodic processes[, and] . 

[(f) executing the scheduled latter asynchronous process at its scheduled time.] 

[0096] In accordance with another embodiment, a method of processing a plurality of 
processes, some of which are periodic and some of which are asynchronous, comprises: 
(i) prior to executing the processes: 

(a) determining which asynchronous processes [have less flexibility in meeting their dead- 
lines than any of the periodic processes,] should be converted into new periodic processes, 
converting each asynchronous process that should be converted into a new periodic process, 

(b) determining which of the remaining asynchronous processes have less flexibility in 
meeting their deadlines than which of the periodic processes, including new periodic 
processes converted from asynchronous processes, adding the execution time of each of the 
less flexible asynchronous processes to the execution time of each of the more flexible peri- 
odic processes, 

(c) scheduling each of the periodic processes into time slots, 
(ii) and during run-time, 

[(d) converting each asynchronous process which has greater or equal flexibility in meeting 
their deadlines than any of the periodic processes into a new periodic process, and scheduling 
the new periodic process at a time which will not conflict with execution and completion of 
any of the other periodic processes,] 

[(ii) and during run-time,] 

[(e)] (d) executing the periodic and new periodic processes, interrupting any of the more 
flexible periodic and new periodic processes whenever possible to process any of the less 
flexible asynchronous processes for which a request to execute may be received at any time. 

[0097] In accordance with another embodiment, a method of scheduling execution of 
processes by a processor comprises: 

(a) scheduling periodic time slots for all periodic processes which time slots each include 
time for each of the periodic processes and time for all asynchronous processes which have 
less flexibility in meeting their deadlines than do the periodic processes, 
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[(b) determining worst case response times of all other processes,] 
[(c)] (b) construct a schedule which includes the periodic time slots and sufficient interven- 
ing time to process said all other processes, [and] 

(c) determining worst case response times of all asynchronous processes, and 

(d) executing the processes in accordance with the schedule and as said all other processes 
are required to be processed from time to time. 

BRIEF INTRODUCTION TO THE DRAWINGS 

[0098] A better understanding of the invention may be obtained by reading the detailed 
description of the invention below, in conjunction with the following drawings, in which: 

[0099] Figure 1 is a [feasibility] feasible pre-run-time schedule for an embodiment of the 
invention, 

[0100] Figure 2 is a timing diagram of possible run-time execution of certain asyn- 
chronous and periodic processes, 

[0101] Figures 3 and 8 are [feasibility] feasible pre-run-time schedules for other embodi- 
ments of the invention, 

[0102] Figures 4, 5, 6, 7 and 9 are timing diagrams of possible run-time execution of other 
asynchronous and periodic processes, 

[0103] [Figures 10, 11 12 and 13 are example timing diagrams of possible run-time exe- 
cution of various periodic processes,] Figures 10 and 13 are example timing diagrams of 
possible timing parameters of various new periodic processes resulting from converting 
asynchronous processes to new periodic processes, 

[0104] Figure 14 is another example of a [feasibility] feasible pre-run-time schedule, [Fig- 
ures 15, 16 and 17 are example timing diagrams of possible run-time execution of various 
periodic processes,] 

[0105] Figures 11, 12, 15, 16 and 17 are example timing diagrams of possible timing 
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parameters of various periodic processes, 



[0106] Figure 18 is another example of a [feasibility] feasible pre-run-time schedule, 

[0107] Figure 19 is another example of a [pre-run-time schedule,] possible run -time 
execution of other asynchronous and periodic processes, 

[0108] Figures 20A - 20H are timing diagrams used in the explanation of various example 
cases, and 

[0109] [Figure 21 is a timing diagram of a feasible schedule on two processors,] Figures 
21 and 22 are feasible pre-run-time schedules on two processors for other embodim ents of 
the invention, 

[0110] [Figures 22 and 23 are timing diagrams of pre-run-time schedulers, on two pro- 
cessors, and] Figure 23 is a timing diagram of a possible run-time execution of other 
asynchronous and periodical processes on two processors, and 

[0111] Figures 24 and 24 A are block diagrams of systems on which the present invention 
can be carried out. 
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DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS OF THE INVENTION 



[0112] Example embodiments will now be given which illustrate operation and advan- 
tages of the present invention as compared with systems and methods that perform all schedul- 
ing activities at run-time. It should be noted that existing systems and methods that perform 
all scheduling activities at run-time are not able to guarantee the schedulability of the set 
of processes given in these examples. Some of the embodiments will be described in pseu- 
docode, which is a shorthand form of English understandable to persons skilled in the field 
of this invention. 

rPeriodic Processes ] Periodic Processes 

[0113] A periodic process consists of a computation that is executed repeatedly, once in 
each fixed period of time. A typical use of periodic processes is to read sensor data and up- 
date the current state of internal variables and outputs. 

[0114] A periodic process p can be described by a quintuple (o p , r p , c p ,d p ,prd p ), wherein 
prd p is the period. c p is the worse case computation time required by process p, d p is the 
deadline, i.e., the duration of the time interval between the beginning of a period and the 
time by which an execution of process p must be completed in each period, r p is the release 
time, i.e., the duration of the time interval between the beginning of a period and the earliest 
time that an execution of process p can be started in each period, and o p is the offset, i.e., the 
duration of the time interval between the beginning of the first period and time 0. 
When there exists flexibility in assigning an offset value for a periodic process, a 
permitted range of the offset, offsetlowerbound(p) < o p < offsetupperbound(p), instead of 
one fixed offset, can be specified for that process. A single offset value constraint is a s pecial 
case of a permitted range of offset constraint. 

[0115] It is assumed that o p , r p , c p , d p , prd p as well as any other parameters expressed 
in time have integer values. A periodic process p can have an infinite number of periodic 
process executions [}] po, p\, pi, with one process execution for each period. For the ith 
process execution p { corresponding to the ith period, p{% release time is R Pi = o p + r p + prd p 
x (/ - 1); and /?;'s deadline is D Pi = o p + d p + prd p x (i - 1) 
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The uppercase letters R and D in R p and D p are used herein to denote the release time and 
deadline respectively of a periodic process execution of some periodic process /?. 
It is noted that it is of common practice to include the system overhead in the computation 
time of the processes. 

[0116] Reference is made to Figure 11 and Figure 12 for examples of periodic pro- 
cesses. Figure 11 illustrates the periodic process pg = ( o PB ,r PB ,c PB ,d PB ,prd PB ) where 
r PB = l 5 c Pfl = 3, d PB = 4, prd PB = 12, o PD = 0. Figure 12 illustrates the periodic process 
Pd = ( o Pc ,r pc ,c Pc ,d Pc ,prd pc ) where r pc = 0,c pc = 4, d Pc = 4, /?rrf pc = 12, o pc = 7. 

[ Asynchronous Processes ] Asynchronous Processes 

[0117] An example of an asynchronous process is one which consists of a computation 
that responds to internal or external events. A typical use of an asynchronous process is to 
respond to operator requests. Although the precise request times for executions of an asyn- 
chronous process a are not known in advance, usually the minimum amount of time between 
two consecutive requests min a is known in advance. An asynchronous process a can be de- 
scribed by a triple (c a ,d a ,min a ). c a is the worse case computation time required by process 
a. d a is the deadline, i.e., the duration of the time interval between the time when a request 
is made for process a and the time by which an execution of process a must be completed. 
An asynchronous process a can have an infinite number of asynchronous process executions 
ao, a\, a2, with one process execution for each asynchronous request. For the ith asyn- 
chronous process execution a, which corresponds to the ith request, if a/'s request (arrival) 
time is R an then a/'s deadline is D a . = R a . + d a . 

[0118] The uppercase letters R and D in Ra and D a will be used herein to denote the re- 
quest (arrival) time and deadline respectively of an asynchronous process execution of some 
asynchronous process a. 

[Schedules ] Schedules 
[0119] If a periodic process p or an asynchronous process a has a computation time of c p 
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or c a , then it is assumed that that process execution p x or a x is composed of c p or c a process 
execution units. Each processor is associated with a processor time axis starting from 0 and 
is divided into a sequence of processor time units. 

[0120] A schedule is a mapping from a possibly infinite set of process execution units to a 
possibly infinite set of processor time units on one or more processor time axes. The number 
of processor time units between 0 and the processor time unit that is mapped to by the first 
unit in a process execution is called the start time of that process execution. The number of 
time units between 0 and the time unit subsequent to the processor time unit mapped to by 
the last unit in a process execution is called the completion time of that process execution. A 
feasible schedule is a schedule in which the start time of every process execution is greater 
than or equal to that process execution's release time or request time, and its completion time 
is less than or equal to that process execution's deadline. 

[0121] Reference is made to Figures 1-9, 14 and 18 are examples of feasible schedules, 
wherein the horizontal axis is the time axis, and time period segments are separated by verti- 
cal lines which represent release times and deadlines, as will be described below. 

[0122] It should be noted that, in order to avoid use in this specification of an exceedingly 
large number of repetitions of use of the word "executions of process", or "executions of 
process i", these terms have been in many places herein abbreviated to the word "process", 
or to simply"i". Thus whenever there is a reference to the term "process" as related to a 
schedule, the term "process", or "process i", or "i" when i is the name of a process should be 
understood as meaning "process execution" or "the execution of process [I] i". 

[ Process Segments ] Process Segments 

[0123] Each process p may consist of a finite sequence of segments p(0), p(l), p(n(p)), 
where p(0) is the first segment and p(n(p)) is the last segment in process p. Given the release 
time r p , deadline d p of process p and the computation time of each segment p[i] in process 
p, one can easily compute the release time and deadline for each segment, as described in the 
aforenoted 1993 article by Xu and Parnas. 
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[0124] Parallel computations can be represented by several processes, with various types 
of relations defined between individual segments belonging to different processes, and pro- 
cesses can be executed concurrently; thus requiring each process to be a sequence of segments 
does not pose any significant restrictions on the amount of parallelism that can be expressed. 

[Precedence and Exclusion Relations ! Precedence and Exclusion Relations 

[0125] Various types of relations such as precedence relations and exclusion relations may 
exist between ordered pairs of processes segments. A process segment i is said to precede 
another process segment j if j can only start execution after i has completed its computation. 
Precedence relations may exist between process segments when some process segments re- 
quire information that is produced by other process segments. 

[0126] A process segment i is said to exclude another process segment j if no execution 
of j can occur between the time that i starts its computation and the time that i completes its 
computation. Exclusion relations may exist between process segments when some process 
segments must prevent simultaneous access to shared resources such as data and I/O devices 
by other process segments. 

[Latitude of a Process ! Latitude of a Process 

[0127] The "latitude" of a process x> denoted by is a user defined measure of the 
latitude in meeting process jc's deadline. 

[0128] For exemplary purposes, in all the examples given in the description of the present 
invention, we will assume that for each process jc, is set to the following value: 

— for each periodic process pu L Pi = d Pi - r p .\ 

— for each asynchronous process a;, L a . = d ar 

It should be noted that L x can be defined differently according to some other criteria, depend- 
ing on the application. 

[0129] (For example, for each P-h-k process or P-s-k process instead of defining 
L Pi = d Pi - r pn L Pi = d Pi could be defined, or any other criteria for defining L Pi could be 
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used.) 
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[Main Types of Processes] Main Types of Processes 



[0130] The main types of processes that are considered herein are the following; 

[0131] Set P-h-k: Periodic processes with hard deadlines and known characteristics. Each 
such process may consist of one or more segments, with precedence relations defined on them 
to enforce the proper ordering of segments belonging to the same process. It is assumed that 
the following characteristics are known for each such process segment before run-time: 

[0132] -period, 

- worst-case execution time, 

- release time, 

- deadline, 

- the set of data that each segment reads and writes, 

- any exclusion relationships with other process segments, 

- any precedence relationships with other periodic process segments. 

[0133] Set A-h-k: Asynchronous processes with hard deadlines and known characteris- 
tics. It is assumed that each such process consists of a single segment and the following are 
known for each such process before run-time: 

[0134] -deadline, 

- worst-case execution time, 

- minimum time between two consecutive requests, 

- the set of data that the process reads and writes, 

- any exclusion relationships with other process segments. 

[0135] Set P-s-k: Periodic processes with soft deadlines and known characteristics. Each 
such process consists of one or more segments, with precedence relations defined on them to 
enforce the proper ordering of segments belonging to the same process. It is assumed that the 
following are known for each such process before run-time: 

[0136] -period, 

- worst-case execution time, 
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- release time, 

- deadline, 

- the set of data that the process reads and writes, 

- any exclusion relationships with other process segments, 

- any precedence relationships with other periodic process segments. 

[0137] Set A-s-k: Asynchronous processes with soft deadlines and known characteristics. 
It is assumed that each such process consists of a single segment and the following are known 
for each such process before run-time; 

[0138] -deadline, 

- worst-case execution time, 

- the set of data that the process reads and writes, 

- any exclusion relationships with other process segments. 

[0139] Set A-s-u: Asynchronous processes with soft deadlines and unknown character- 
istics. It is assumed that each such process consists of a single segment and nothing else is 
known about each such process before run-time. 

[0140] In the present invention, as well as in the method described in the 1993 article 
by Xu and Parnas referred to above, and that can be used in the present invention, [It] it is 
assumed that the basic scheduling unit is a segment. The terms "segment" and "process will 
also be considered as having the same meaning. 

[Pre-Run-Time Phase ] Pre-Run-Time Phase 
Step 1: Conversion of A-h-k-p processes 

[0141] In this step asynchronous processes with hard-deadlines and known characteristics 
are referred to as A-h-k processes. The A-h-k processes are divided into two subsets. Differ- 
ent methods will be used to reserve processor capacity for the execution of the processes in 
each of the two subsets. 
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[0142] The processes in one of subsets, called A-h-k-p processes, should be converted 
into equivalent new periodic processes with hard deadlines. The remaining A-h-k processes 
are called A-h-k-a processes and processor capacity should be reserved for their execution 
before run-time. 

[0143] For each A-h-k-a process, processor capacity in each hard-deadline periodic pro- 
cess should be reserved by the following. 

[0144] Let Sp be the original set of P-h-k processes; 
Let Sa be the original set of A-h-k processes; 

Let S a be the set of A-h-k processes that have not been converted into periodic processes; 
Let S p be the set of new periodic processes that were converted from A-h-k-p processes. 

[0145] For each p t e (SpUS p ) we calculate its "adjusted computation time" c Pi f as fol- 
lows. 

c P l — c Pi + ad justed-capacity(pi) 

[0146] The exact adjusted_capacity function that is used, depends on the application char- 
acteristics; for example, it may depend on the number of processors that are used, and other 
factors. 

[0147] In the examples, [we will assume] it is assumed that the following simple formula 
is used. 

ad justed .capacity {pi) — 

ajeS a AL aj <L p . mm <*j 

[0148] Above, for each process p, in Sp (the original set of P-h-k processes) or in S p (the 
new periodic processes converted from A-h-k-p processes), for every possible occurrence of 
any A-h-k-a process aj between r Pi and d Pi , if L aj < L Pi then ay's computation time is added 
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to pi's computation time. 



Example 1. 

[0149] Assume 4 asynchronous processes with hard deadlines and known characteristics 
(A-h-k processes), and 4 periodic processes with hard deadlines and known characteristics 
(P-h-k processes) as follows. 

[dnewpi = + conversion_room(a/);] 

[The exact conversion_room function that is used, depends on the application characteris- 
tics.] 

[In the following two examples, first assume that the following simple formula is used.] 

[conversion.room(xi) =] 

a& c ao = 2,d ao = 2,min aQ = 1,000; 

a\\ c ax = 2,rf ai = l,min ax ~ 1,000; 

#2^ c a2 = 10, d a2 = 239, min a2 = 1,000; 

o%\ c ag = 10,<4 9 = 259, min a9 = 1,000; 

r PA = 0,c PA = 26,d P4 = 200, prd P4 = 200,o P4 = 0; 
P5' r P5 = 30,c P5 = 16,^ = 50, prd ps = 200, o Ps = 0; 
Pe: r P6 = 0,c P6 = 26,d P6 = 200, prd pe = 200,o P6 = 0; 
Pi- r Pl = 0,c P7 = I6,d pi = 200, prd pi = 200, o Pl = 0. 

[0150] The adjusted computation times for P4,P5,P6<>pi will respectively be: 
c P / = c P4 + c ao +c ai = 26 + 2 + 2 = 30; 
c ps = C P 5 + C a 0 + C a x = 16 + 2 + 2 = 20; 

c Pe ' = c />6 + + c * i = 26 + 2 + 2 = 3 0 ; 

Cp/^c^+c^ + Q, = 16 + 2 + 2 = 20. 
□ 
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[0151] One technique for converting an asynchronous process into an equivalent periodic 
process is described in the aforenoted 1983 article by [Moka] Mok in which an asynchronous 
process (c a ,d a ,min a ) can be converted into a periodic process (o p , r p ,c p , d p , prd p ) which sat- 
isfies the following conditions: c p = c a , d a >d p > c a , prd p < min(d a -d p + l,mm fl ), r p = 0, 
o p = 0. 

[0152] However, as noted earlier, the technique described by [Moka] Mok did not con- 
sider the case of non-zero offsets, that is, non-zero length intervals between time zero and the 
beginning of periods of the converted periodic processes. 

[0153] As will be described below, the present invention extends this technique to al- 
low non-zero offsets. In particular, when an asynchronous process (c a ,d a ,min a ) converted 
into a periodic process (o p ,r p ,c p ,d p ,prd p ), if it satisfies the following conditions: c p = c a , 
da>d p > c a , prd p < min{d a — d p + l,mm fl ), r p = 0, the converted periodic process is al- 
lowed to have offsets that range from 0 to prd p -\\Q<o p < (prd p - 1).. 

[0154] By using non-zero offsets, one increases considerably the chances of satisfying all 
the given timing constraints. 

[0155] Furthermore, the technique described by [Moka] Mok only deals with one process. 
When more than one process must be converted into periodic processes, the new periodic pro- 
cesses may have timing conflicts with each other and with the original set of asynchronous 
and periodic processes. For example, a direct application of [the Moka] Mok's technique 
could result in more than one periodic process each having a release time of zero and a dead- 
line equal to the computation time. 

[0156] In order to avoid such timing conflicts, in accordance with an embodiment of the 
present invention a procedure is used for converting a set of asynchronous processes into pe- 
riodic processes, which also takes into account the possibility of timing conflicts with other 
existing asynchronous and periodic processes. 

[0157] First, a procedure is introduced that converts a single asynchronous process a, into 
a corresponding new periodic process "newp". When determining newpfs deadline d newpn 
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we leave "room" for all the hard deadline processes that have a shorter or equal deadline than 
that process's deadline, as follows: 



dnewpi = Cat + conversion_room(a £ ); 

[0158] The exact conversion-room function that is used, depends on the applicati on 
characteristics. In the following two examples, first assume that the following 
simple formula is used. 

conversionjroom{x[) = 



Pj e(S P iJS p )Ad pj <d Xi P rU Pj aj€S a Maj<d Xi A ift miHa J 



[0159] In the above relationship, the deadline of the new periodic process d newpi appears 
on both the left-hand side and right-hand side thereof. The value of d newpi as well as all other 
parameters of the new periodic process can be found with the following procedure for con- 
verting a single asynchronous process a- t = (c an d an min a ) e S a into a periodic process newpi 

= {o new pi j r new pi > Cnewpi 5 d neW p i , prd n€W p i ) G Sp' 



failure:= false; 

r new pi'- = 0j 
c new pi'— 

dnewpi := c a[ + conversion jroom{a,i)\ 
deadlinefound:= false; 

while not(deadlinefound) and not(failure) do 
begin 

dpreviousi • = dnewpi ' 

dnewpi = c Qi + conversion jroom{previousi)\ 
ifd prev i 0USi = d newpi then deadlinefound:= true; 
if(d ai 



38 



then 

pfd newpi '.= {d ai - d newpi + 1) 
else 

prd newpi \= min ai \ 
prd newpi := adjustperiod(^r4 evv/7 .); 

{perform any necessary adjustments to prd newpi } 

dnewr = d a{ — prd newpi + 1; 

if (d newpi > d ai ) or (prd newpi < 

dnewpi) 

then failure:= true 
else if deadlinefound 
then 
begin 

S p \—S p \j{newpi}\ 
S a := S a — 

end; 



[0160] If it is assumed that the earliest time that asynchronous process a; can make a re- 
quest for execution is time then the permitted range of the offset o newpi is [(0, t + prd newpi - 
1)] [t,t + prd newpi -l] . 

[0161] Reference is made to Figures 10 and 13 for examples of conversion of an asyn- 
chronous process into a periodic process. 

[0162] In Figure 10, the Periodic process newp A = {0 newpA , r newpA , c newpA , d newpA , prd newpA 
is translated from the asynchronous process a A = (c aA , d QA , min aA ) = (2, 7, 8) , where r newpA = 
0, c newpA = c aA = 2, dnewp A = c a A — 2, prd newpA = min(d aA - d newpA + 1 , min aA ) = mm (7 -2 + 
1,8) = 6, the permitted range of offset is: 0 < o newpA < prd newpA - 1 = 5. If periodic process 
newp A $ offset is set to 0, , i.e., o newpA = 0, then periodic process executions newp Ao , newp Al , 
newp Al , newp A3 ,newp A4 ,newp As ,. . . start at the times 0, 6, 12, 18, 24, 30, . . . respectively, 
and if the asynchronous request times R a ^Ra Ax >Ra A2 are 1, 9, 17, 27, then the asynchronous 
process executions a Ao) a A} ,a A21 a A3 start at the times 6, 12, 18, 30 respectively. a Ao executes 
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in the time slot of newpA x , ua x executes in the time slot of newpA 2 , a^ 2 executes in the time 
slot of newpA 3 , ua 3 executes in the time slot of newpA y 

[0163] In Figure 13, the periodic process newp A = (0 newpA , r newpA , c newpA , d newpA , prd newpA 
translated from the asynchronous process a A = (c aA ,d aA ,min aA ) = (2,7,8), where r newpA = 
Qi c newpA — Cqa ~ 2) d newpA = c aA = 2, prd neW p A = min(d aA —d newpA + l,/wiw fli4 ) = min(l — 
2 + 1 , 8) = 6, the permitted range of offset is: 0 < o newpA < prd newpA - 1 = 5. If periodic pro- 
cess newp^s offset is set to 5, , i.e., o newpA = 5, then periodic process executions newpA 0 , 
newpA } ,newpA 2 , newpA 3 > newpA^ newp As , . . . start at time 5, 11, 17, 23, 29, 35, . . ., and if the 
asynchronous process always makes requests at the earliest possible time and at the highest 
possible rate, the first five asynchronous request times R Uq ,R aA} , R aAl , R aA3 > R a A4 are 0, 8, 16, 
24, 32, then the asynchronous process executions <2a 0 ^Ai > a A 2 > a A 3 > «A 4 start at the times 5, 11, 
17, 29, 35 respectively. ga 0 executes in the time slot of newpA 0 , cla x executes in the time slot 
of newpA x , a Al executes in the time slot of newpA 2 , ua 3 executes in the time slot of newpA A , 
ua a executes in the time slot of newpA 5 , etc. 

[0164] In some cases, when the lengths of periods are relatively prime, the length of the 
LCM of the periods could become inconveniently long. A function "adjustperiod" can be 
used to adjust prd newpn whenever the LCM became inconveniently long. 

[0165] (See Example A below and Figures 15 and 16 for an example of the use of the 
adjustperiod function). 

[0166] The adjustperiod function will be described below in the section related to con- 
struction of a feasible pre-run-time schedule for the P-h-k processes. 

Example 2. 

[0167] Assuming that in addition to the processes in Example 1 above, the following A- 
h-k process: 

[A=] ay. c a3 = 10,^3 = 114, min a3 = 114. 

If the procedure above is used to convert a$ into a periodic process newpi, prior to entering 
the while loop, d newp3 = c a3 + c P5 + c ao + c ax = 10 + 16 + 2 + 2 = 30. In the first iteration of 
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the while loop, d prev i ous = d newp3 = 30; d newp3 = c a3 + + c ax = 10 + 2 + 2 = 14. 



[0168] Since d prev i OUS / d newp3 , deadlinefound = false. In the second iteration of the while 
loop, d prevxous = d newp3 = 14; d newp3 = c fl3 + c ao + c ax — 10 + 2 + 2 = 14. Since d previous = 
dnew P3 , deadlinefound = true. prd newp3 = (d a3 - d newp3 + 1) = 1 14 - 14 + 1 = [100] 101 . 

[0169] If [we use] the adjustperiod function and select_exp_upperbounds procedure de- 
scribed herein with reference to constructing a feasible pre-run-time schedule [to adjest] 
are used to adjust the period prd newp3 , by using prd max = prd P4 = 200, and the following 
initial exponent upperbound values: exp2 init = 5, expi mit = 3, exp5 init = 2, expl init = [0,] 
\,exp\\ ini t =0, and use the value 24 for the parameters C m ,C m n,C m7 , C m 5, C m 3, C m 2, and 
Q,Q 7 ,Q5,Q3,Q2, and the value 0 for Q 7 , C e5 , Q 3 , C e2 , and the values 0, 1, 2, for 
Q57, Q35?C?23> respectively, then the select_exp_upperbounds procedure will produce the fol- 
lowing values for the exponent upperbounds: 
exp2 = 5, exp3 = 3, exp5 = 2, exp7 = 0, expl 1 = 0. 

After the generate_refprd procedure has used the above exponent upperbounds to compute 
the sorted list of reference periods in re fprd, the adjustperiod function will use the sorted list 
of reference periods to compute the following adjusted period: 
prd newp3 - adjustperiodCprd^,^) = adjustperiod(lOl) = 100; 
dnewpi = d a3 - prd newp3 + 1 = 1 14 - 100 +1 = 15. 

The permitted range of newp^s offset is 0 < o newp3 < 0 + prd newp3 - 1 = 0 + 100 - 1 = 99. 
In Examples 1-7, it will be assumed that all the periodic process periods are adjusted using 
the adjustperiod function with exactly the same parameters as was used for adjusting newp^'s 
period. 

□ 

[0170] The criterion for determining whether an A-h-k process should be converted into a 
periodic process or remain asynchronous, is based whether the ratio of the processor capacity 
that needs to be reserved for the new periodic process, to the processor capacity that needs to 
be reserved for the asynchronous process if unconverted, exceeds a specified threshold. 

[0171] For each A-h-k-p process aj that is converted into a new periodic process newpj, 
the reserved processor capacity (RPC) in the pre-run-time schedule can be calculated with 
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the following relation: 



[RPC newpj - prd Jj p ] 



ppr — newp J 

^^newpj - prdnewpj 



[0172] For each A-h-k-a process aj that remains asynchronous, the reserved processor 
capacity (RPC) in the pre-run-time schedule can be calculated with the following formula: 



RPC aj = ( X ' mina ^ V -fe- 
Pi e(SpUS p )AL aj <L Pi P rd Pi min <*J 



[0173] In general if an asynchronous process has a long minimum time between consecu- 
tive requests, then that asynchronous process is more likely to require less processor capacity 
to be reserved if it is treated as an A-h-k-a process compared with treating it as an A-h-k-p 
process. 
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[0174] A procedure for converting a set of asynchronous processes {{c an d an min a ) \ 
0, !,...,«} C Sa into a set of periodic processes S p = {(o pn r pn c Pn d Pn prd Pi )\i = 0, 1,... 
follows: 

5/>:= original_set_of_P-h-k_processes; 
Sa := originaLset_of_A-h-k_processes; 

V=0; 

numofchanges:=0; 
changes:^ true; 

while (changes) and (numofchanges < someupperlimit) do 
begin 

changes:= false; 

begin 

for each aj 6 Sa, in the order of increasing deadlines do 
begin 

{The procedure described earlier should be used to tentatively convert 
each A-h-k asynchronous process aj e Sa into a new periodic process 
newpj e S p with the same index. Note that this conversion depends not 
only on aj 9 but also on the entire set of new periodic processes in S p , 
the original set of P-h-k processes in Sp, and the set of A-h-k-a 
processes in S a } 

newpy.- Tentatively_convert_into_new_periodic_process(ay, S p , Sp, S a ) 

iHdnewpj < daj) and (prd newpj > d newpj ) 

then 

begin 

Cnewp/ = c newpj + adjusted-capacity{newpj)\ 
RPC newpj .'. = c newp j I prd newp j\ 

r d Pi~ r Pi -\ c 

UUr •- /V I minaj \<~<*j ^ C aj # 

nr^ aj . KZs Pi e(S P US p )AL aj <L Pi pr d pi ) t mirin . ' 

\ithreshold{aj) *RPC newpj < RPC aj 
then 
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begin 

if {newpj } &S p 

{or if the version of newpj in S p is different 

from the newly converted version of newpj } 

then 

begin 

changes:= true; 

S p :=S p U {newpj }; 

{add new periodic process newpj 

converted from a } to the periodic set S p , 

replacing any older version of newpj in S p } 

end; 

if {aj } eS a then 
S a -=S a - { aj }; 

{remove aj from asynchronous set S a } 

end 

else {threshold(aj) *RPC newpj > RPC aj } 
begin 

if {aj } g S a then 
begin 

changes:= true; 

S a -=S a U{aj}\ 

{add aj to asynchronous set S a } 

end; 

if {newpj } e S p then 
s p :=s p - { newpj }; 
{remove p y - from periodic set S p } 

end; 

end; 

end; 

for each ay G Sa, in the order of decreasing deadlines do 
begin 
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(repeat the same procedure that was done in the order of 
increasing deadlines for each a } G Sa above) 

end; 

if changes then 

numofchanges:= numofchanges + 1; 

end; 

end; 



At the end of the procedure, the final set of A-h-k-a processes is S a and the final set of new 
periodic processes converted from A-h-k-p processes is S p 

[0175] Above, the permitted range of the offset for each new periodic process newpi, 

O new pj IS 

[0176] The user can decrease or increase the "threshold^)" value for each A-h-k pro- 
cess cij in the procedure above, to increase or decrease the likelyhood that aj will be converted 
into a P-h-k process, depending on the application requirements. Setting the threshold value 
of a certain asynchronous process to a high value so that it is unlikely to be converted into 
a new periodic process, may in some cases increase the schedulability of that process; in 
other cases converting an asynchronous process into a new periodic process may increase 
schedulability; but increasing schedulability may not be the only objective in a particular ap- 
plication. In some cases, one may prefer that a certain [A-h-] A-h-k process be converted into 
a new periodic process whenever possible, to reduce scheduling overhead and/or simplify the 
timing analysis and make it easier to predict the system's behavior. 



Example 3. 

[0177] Assuming that the threshold value for each A-h-k process is set as follows: threshold(ao) = 
10, threshold{a\) = 10, threshold(a 2 ) = \,threshold(ai) = 2.5, threshold(a 9 ) = 1, the pro- 
cedure above will calculate the following for each of the processes in Examples 1- 2. 

ao: 
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dnewpo — 2; pi*d ne wp^ < min{d ao — d neW p 0 + — 2 — 2+1 — 1< c new p 0 — 2 

ao will NOT be converted into a new periodic process and will remain asynchronous and 

belong to the set A-h-k-a. 

a\\ 

dnewpx = c ai +\d newpi /min ao ]c ao = 2 + [4/1000] 2 = 4 
prd newpi = min(d ai - d newpx + \,min ax ) = 7 - 4 + 1 = 4 
RPC neW p } = C/^w^j f / prd newpi =4/4= 1 

)/min ai ~\ c ai /prd newp3 + \(d Pi - r P4 )/mm ai ] c a Jprd Pi 
+ \( d P5 -r P5 )/min ai } c aJ prd P5 +\(d P6 -r p6 )/min ai ] c a J 'prd^+Kd^-r^) /min ai ] c a Jprd l 
+c ax /min ai = 2/100 + 2/200 + 2/200 + 2/200 + 2/200 + 2/1000 
= 0.062 < threshold(a\)*RPCne Wpi = 10* 1 = 10 

a i will NOT be converted into a periodic process, and will remain asynchronous and belong 
to the set A-h-k-a. 

ay. 

+ \d n ewpjmin ao ']c ao +\d newp3 /min ai )c ai =10+ |"30/1000]2+ [30/100012 = 

14 

prd newpj = min(d aj - d newp3 + l,min a3 ) = 114 - 14 + 1 = 101 
After the adjustperiod function is applied (see Example 2): 
prd newp3 = adjustperiod(lOl) = 100; 
dnewpx = d a3 - prd newp3 + 1 = 1 14 - 100 + 1 = 15; 
RPC newp3 = Cnewpi' / prdne Wpj = 14/100 = 0.14; 

RPC a 3 = \{d P4 -r P4 )/min a3 ] c a Jprd Pi +\(d P6 - r P6 )/min a3 \ c a Jprd P6 

+ {(d pi - r pi )/min a ^ c a Jprd Pl +c a3 /min a3 = 20/200 + 20/200 + 20/200 + 10/113 = 0.388 

> threshold(ay) * RPC newp3 = 2.5 * 0.14 = 0.35 

a 3 will be converted into a new periodic process newp^ = (r newp3 ,c newp3 ,d newp3 ,prd newp3 ) = 
(0, 10, 14, 100). 

ay- 

dnewpi — C a2 + [<4ew>p 2 / /nin «ol c ao + \dnewp 2 /min ai ]c ai + \dne Wp2 / prd newp3 \c newp3 

+ {d newp2 /prd P5 ]c ps = 10 + |"40/1000]2 + [40/1000]2 + [40/1001 10 + [40/2001 16 = 40 
prd newp2 = min(d a2 - d newp2 + l,min a2 ) = 239 - 40+ 1 = 200 
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RPCnew P2 = c newp2 f /prd newp2 = 14/200 = 0.07 

RPC a2 = c a Jmin Ql = 10/1000 = 0.01 < threshold(a 2 ) *RPC newp2 = 1 * 0.07 = 0.07 

a2 will NOT be converted into a periodic process, and will remain asynchronous and belong 

to the set A-h-k-a. 

a 9 : 

dnewpg — Ca 9 + \d neW p 9 / min aQ ] c QQ + \d neW p 9 /min ai ] c a{ + \d neW p 9 /ttiin a2 \ c ai 

+ \d n ewp 9 /prd P5 ]c P5 = 10+ |"50/1000]2+ [50/100012 
+ [50/10001 10 + [50/1001 10 + [50/2001 16 = 50 
prd newpg = min(d a9 - d newp9 + 1 , min a9 ) = 259 - 50 + 1 = 200 

f /prd newp9 = 24/200 = 0.12 
RPCa 9 = Cajmiriag = 10/1000 = 0.01 < threshold(a 9 )*RPC n€wpi = 1 * 0.12 = 0. 
ag will NOT be converted into a periodic process, and will remain asynchronous and belong 
to the set A-h-k-a. 

Except for prd newp3 , that was adjusted from 101 to 100, all other periods in this example 
remain unchanged by the adjustperiod function. 

[0178] An alternative case where thresholding) is set to an arbitrary large value, ensuring 
that A-h-k process a^ is not converted into a periodic process, is discussed below with respect 
to Example 13. 
□ 

[0179] There exists a circular dependency relationship between the calculation of the RPC 
for each A-h-k-a process and the determination of the set of A-h-k-a processes. The calcula- 
tion of the RPC for each A-h-k-a process depends on the original set of P-h-k processes S Py 
the set of new periodic processes S p converted from A-h-k-p periodic processes, and the set 
of processes that remain asynchronous 5 a . 

[0180] However determining which A-h-k process should be converted into a new pe- 
riodic process in turn depends on the calculation of the RPC amount for the corresponding 
A-h-k-a process. It is for this reason that an iterative procedure is used for this task. 

[0181] Below, all periodic processes with hard-deadlines and known characteristics (in- 
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eluding all new periodic processes in S p that were converted from A-h-k-p processes, and the 
original set of P-h-k processes in S/>), will be referred to as P-h-k processes. 
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Step 2: Construct a feasible pre-run-time schedule for the P-h-k processes 



[0182] [A feasible pre-run-time schedule for the P-h-k processes is constructed.] In this 
step, the schedulabiliy of the set of all periodic processes with hard deadlines and known 
characteristics (P-h-k processes) are determined using their adjusted computation times, and 
a feasible pre-run-time schedule that satisfies all the [specifweed] specified constraints is con- 
structed. 

[0183] In some cases, when the lengths of periods are relatively prime, the length of the 
LCM of the periods could become inconveniently long. One may use a function "adjust- 
period" to adjust the period length of each periodic process, whenever the LCM becomes 
inconveniently long. 

[0184] Preferred function and procedures for adjusting the periods of periodic processes 
in order to reduce the Least Common Multiple (LCM) of the period lengths, and the pre-run- 
time schedule length are as follows: 



function adjustperiod(prd); 
begin 

j:=l; 

while refprd[j] < prd do 

j==j + i; 

adjustperiod:= refprd[j-l]; 

end; 

procedure generate_refprds(exp2, exp3, exp5, exp7, expll); 
begin 

count:= 1; 

for i:= 0 to exp2 do 

begin 

for j:= 0 to exp3 do 
begin 

for k:= 0 to exp5 do 
begin 
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for 1:= 0 to exp7 do 
begin 

for f:=0 to expll do 

begin 

refprd[count]:= 2 l * V * 5 k * l l * 1 \ f \ 
count: = count + 1; 

end; 

end; 

end; 

end; 

end; 

for i:= 1 to count - 2 do 
begin 

for j:= i + 1 to count - 1 do 
begin 

if refprd[i] > refprd[j] 

then 

begin 

temp:= refprd[i]; 

refprd[i]:= refprd[j]; 

refprd[j]:= temp; 

end; 

end; 

end; 

end; 

procedure select.exp.upperboundsCpr^, exp2 init , exp3 init , exp3 init , exp5 init , 

explinit, explicit 

Cm3> C m 2, Q, Q7, Q5, Q3, Q2, 
C e 7» C e s, Q3, C e 2, Q35, Q23); 

begin 

exp2:=ex/?2;„;,; 
exp3:=£x/?3, mr ; 
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exp5:= exp5 init ; 
exp7:=exp7 init \ 

n:= 2 ex P 2 * 3 exp3 * 5 ex ? 5 * T*? 1 * 1 l ex ? 1 1 ; 
stop:= false; 

if (C m * prd max > n) then 
begin 

while((C m * prd max ) > n) and (not(stop))) do 
begin 

if {C m \\*prd m ax> 11 *n) 

then 

begin 

n:= w* 11; 

expll:= expll + 1; 

end 

else if ((C m7 * prd max ) > (7 * n)) 
then 
begin 

n:= n*7; 

exp7:= exp7 + 1; 

end 

else if ((C m5 * prd max ) > (5 * n)) 
then 
begin 

n:= rc* 5; 

exp5:= exp5 + 1; 

end 

else if ((C m3 * prd max ) > (3 * n)) 
then 
begin 

n:= n*3; 

exp3:= exp3 + 1; 
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end 

else if ((C m2 * prd max ) > (2 * n)) 
then 
begin 

n:= rc*2; 

exp2:=exp2 + 1; 

end 
else 
begin 

stop:= true; 

end; 

end; 

end 
else 

begin {C m * prdmax < n} 

while(((Q * prd max ) < n) and (not(stop))) do 
begin 

if (((Q7 * prd max ) < (n div 7)) and (exp7 > C el ) and ((exp5 - exp7) < Q57)) 

then 

begin 

n:= n div 7; 

exp7:= exp7 - 1; 

end 

else if (((Q 5 * prd^ < (n div 5)) and (exp5 > C e5 ) and ((exp3 - exp5) < C e35 )) 
then 
begin 

n:= n div 5; 
exp5:= exp5 - 1; 

end 

else if (((Q 3 * prdmax) < {n div 3)) and (exp3 > C e3 ) and ((exp2 - exp3) < Q23)) 
then 
begin 
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n:= n div 3; 
exp3:= exp3 - 1; 

end 

else if (((Q 2 * prd max ) < (n div 2)) and (exp2 > C e2 )) 
then 
begin 

n:= n div 2; 

exp2:=exp2 - 1; 

end 
else 
begin 

stop:= true; 

end; 

end; 

end; 

[0185] The function adjustperiod uses a sorted list of reference periods "refprd" to adjust 
the length of the period of each periodic process. It adjusts the length of the period of each 
periodic process "prd" to the largest reference period refprd[x] that is smaller or equal to 
prd. 

[0186] The procedure generate.prd creates a sorted list of reference periods "refprd*\ in 
which each reference period re fprd[x] is equal to 2*' * V * 5* * l l * 1 l f , . . for some integers 
i, j, k, 1, f, . . . where 0 < / < expl, 0<j< exp3, 0<k< exp5, 0 < Z < expl, 0<f< expll, 
. . exp2, exp3, exp5, exp7, expl 1, . . are the upperbounds on the exponents i, j, k, 1, f, . . 
that are applied to the prime numbers 2, 3, 5, 7, 1 1, . . . 

[0187] In order to avoid redundancy, we will illustrate and discuss the methods using only 
the first five prime numbers 2, 3, 5, 7, 11. It is possible to use more prime numbers, that is, 
13, 17, 19, etc., if larger period lengths are needed. One should be able to extend the methods 
shown here to include any additional prime numbers should the need arise. 
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[0188] The procedure selecLexp_upperbounds selects the exponent upperbound values 
exp2, exp3, exp5, exp7, expll, based on the maximum length of the original periods prd max , 
and a set of initial values exp2 iniu expi iniu exp5i nit , exploit, exp\\ iniu for exp2, exp3, 
exp5, exp7, expll, respectively. The Least Common Multiple (LCM) of the periods will 
be bounded by 2 exp2 * 7> expZ * 5^ 5 * T x p 7 * 1 l ex P l 1 . 

[0189] There is a tradeoff in adjusting periods: shorter adjusted periods result in shorter 
LCMs of the periods, and consequently, shorter pre-run-time schedule lengths and fewer in- 
stances of new processes; but will increase the processor utilization and waste more processor 
capacity. This tradeoff can be fine tuned using the exponent upperbound values exp2, exp3, 
exp5, exp7, expll. 

[0190] In general, larger values of the exponent upperbounds will increase the chances 
of the adjusted period length being close to the original schedule length, and reduce wasted 
processor capacity but will increase the LCM of the periods and schedule length. When the 
exponent upperbound associated with a larger prime number, say expll, is increased relative 
to the exponent upperbounds associated with smaller prime numbers, say exp7, exp5, exp3, 
exp2, while the exponent upperbounds associated with the smaller prime numbers are not 
smaller than some minimum value, e.g., min{exp7} = 1, min{exp5} = 2, min{exp3} = 3, 
min{exp2} = 5, respectively, it will also have the effect of reducing wasted processor capac- 
ity but increasing the LCM and schedule length. 

[0191] The procedure select_exp_upperbounds, allows exp2, exp3, exp5, exp7, expl 1, to 
be fine tuned according to specific application requirements. In this procedure, larger values 
of the parameters C m ,C mlh Cmi£ m5 £ m 3£ m 2, C d ,C dl ,C d5 ,C d ^C d2 \ and smaller values for 
the parameters Q7, C c5 , Q3, C e 2, Q57, (^35,^23, are more likely to result in greater values 
for expll, exp7, exp5, exp3, exp2, and are more likely to result in adjusted period lengths 
that are closer to the original period lengths and that have less wasted processor capacity, but 
are also more likely to result in longer LCMs of the periods, longer schedule lengths, and a 
greater number of instances of new processes. 

[0192] Assuming that the value of the exponent upperbounds associated with smaller 
prime numbers are kept greater than certain minimum values, increasing the value of the pa- 
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rameters C„u or associated with a larger prime number x, say 1 1, as opposed to increasing 
the value of the parameters C my or Cd y associated with a smaller prime number y, say 2, is 
more likely to have a greater effect in reducing wasted processor capacity, but is also more 
likely to have a greater effect in increasing the LCM of the periods and the schedule length. 

[0193] If the value zero is assigned to all the parameters or Q x associated with all 
the prime numbers x except one of the prime numbers x\ , then the periods will all be set to 
some exponential value of base jq, and will result in very short LCMs of the periods but very 
significant amounts of wasted processor capacity, unless the original period lengths coincide 
with those exponential values. The parameters Q7, Q5, Q3, C € 2, can be used to ensure 
that the periods are set to multiples of l Cel * 5 Ce5 * 3 Ce3 * 2 C * 2 whenever 0 < C e j < expl init , 
0 < < exp5 inity 0 < C e 3 < exp3 init , 0<C e 2< exp2 initj if required by the application. For 
example, setting C el = 0, C e5 = 2, C € 3 = 0, C e i = 2 will ensure that the periods are set to 
multiples of 100. 

[0194] The objective of fine tuning the values of exp2, exp3, exp5, exp7, expl 1, is to cre- 
ate a list of reference periods refprd[x], that will have values that are sufficiently close to the 
original period lengths, to satisfy the processor utilization level required by the application, 
and maximize the chances of finding a feasible schedule, while at the same time the values 
should be as closely harmonically related to each other (having a smaller LCM value) as pos- 
sible, in order to reduce the schedule length and the number of instances of new processes, 
and reduce storage requirements and system overhead. 

[0195] For example, if the following conditions are satisfied, the difference between the 
original period length and the adjusted period length will never exceed 10% of the original 
period length: 

(1) the exponent upperbounds are not smaller than the following minimum values: min{exp7} 
= 1, min{exp5} = 2, min{exp3} = 3, min{exp2} = 5; 

(2) the maximum period length is not greater than 2^ 2 ~ 3 ) * 3^ 3_1 ) * 5 €xp5 * T xpl * 1 l ex P l 1 
(the maximum period length is not greater than the maximum LCM length divided by 24). 

[0196] If the exponent upperbound expl 1 is not smaller than the minimum value minjexpl 1 } 
= 1, then the maximum period length can be further increased, while still guaranteeing the 
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same utilization level. For example, under the following conditions, the difference between 
the original period length and the adjusted period length will never exceed 10% of the origi- 
nal period length: 

(1) the exponent upperbounds are not smaller than the following minimum values: min{expl 1} 
= 1, min{exp7} = 1, min{exp5} - 2, min{exp3} = 3, min{exp2} = 5; 

(2) the maximum period length is not greater than 2<^ 2_1 ) * 3^ 3-2 ) * 5 ex ? 5 * T^ 1 * 1 l ex P l 1 
(the maximum period length is not greater than the maximum LCM length divided by 18). 

[0197] The described system and methods, have the useful property that, they tend to pro- 
duce adjusted period lengths that are very close to the original period lengths for processes 
with shorter original periods, that is, those processes that are likely to constitute the largest 
proportion of the computation work load; while producing adjusted period lengths that are 
not so close to the original periods for processes whose original period lengths are large and 
close to the LCM of the periods, which in many applications represent the smallest work 
loads. In special cases where processes with periods close to the maximum period represent 
a significant proportion of the computation work load, one can use larger values for the pa- 
rameters C m ,C m \\,Cmi,C m 5£ m ?>,C m 2, to produce adjusted period lengths that are closer to the 
original schedule lengths for processes with large original period lengths. 

Example A 

[0198] Assume that it is required to schedule processes corresponding to the following 
tasks: 

(1) CD- Audio tasks, that need to be serviced at a rate of 2.75 KHz, that is, prdco- Audio = 364 
us; 

(2) ISDN Channnel tasks that need to be serviced at a rate of 1.5 KHz, that is, prd !S DN = 667 
us; 

(3) Voice Channnel tasks that need to be serviced at a rate of 1.375 KHz, that is, prdy oice = 
727 us; 

(4) Keyboard/Mouse tasks that need to be serviced periodically with periods of length 

PrdKeyboard/Mouse = 100 MS = 100,000 US. 

[0199] Assume that the following initial exponent upperbound values are used: exp2 init = 
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5, exph m it — 3, exp5i n u = 2, exploit = 1, explicit = 0, and use the value 24 for the param- 
eters C m5 C m n,C m7 , C m5 , C m 3, C m 2, and Q,Q7,Q 5) Q3,Q2, the value 0 for Q7, Q5, Q3, 
C e 2, and the values 0, 1, 2, for ^57,^35,^23, respectively. 

[0200] The select_exp_upperbounds procedure will produce the following values for the 
exponent upperbounds: 

exp2 = 5, exp3 = 3, exp5 = 2, exp7 = 1, expl 1 = 1. 

[0201] After the generate_refprd procedure has used the above exponent upperbounds to 
compute the sorted list of reference periods in refprd, the adjustperiod function will use the 
sorted list of reference periods to compute the following adjusted periods: 
prdcD-Audio = 360 (original 364), 
prdjsDN - 660 (original 667), 
prdv 0 i ce - 720 (original 727), 
prdKeyboard/Mouse = 92400 (original 100000). 

The LCM of the periods will be 277200, which is 3 times the length of the maximum adjusted 
process period length. 

[0202] Assume now that such a high precision is not required when adjusting the periods 
of the processes with maximum process length, then a smaller value, say 1, may be used for 
the parameters C mi C m n,C m i, C m 5, C m 3, C W 2, and Q,Q 7 ,Q5,Q3,Q2, and still use the value 
0 for Q7, Q5, C e 3, C e 2, the values 0, 1, 2, for ^57,(^,35,(^23, respectively. 

[0203] Assume that the same initial exponent upperbound values are used: exploit = 5, 
expi m i t = 3, exp5 init = 2, expl init = 1, expll init = 0. 

The selecLexp-upperbounds procedure will produce the following values for the exponent 
upperbounds: 

exp2 = 5, exp3 = 3, exp5 = 2, exp7 = 1, expl 1 = 0. 

[0204] After the generate_refprd procedure has used the above exponent upperbounds to 
compute the sorted list of reference periods in refprd, the adjustperiod function will use the 
sorted list of reference periods to compute the following adjusted periods: 
prdcD-Audio = 360 (original 364), 
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prdisDN = 630 (original 667), 
prdyoice = 720 (original 727), 
P rd Keyboard/ Mouse = 75600 (original 100000). 

The LCM of the periods will be 75600, which is 1 times the length of the maximum adjusted 
process period length. 

[0205] Note that in the second case, a smaller value for the parameters C m , C m \\ , C m j, C m $, 
Qt3, C m 2, and Q, Q7, Q5, Q3, Q2, resulted in smaller values for the exponent upperbounds 
(expll was reduced from 1 to 0), and consequently, resulted in shorter adjusted periods, 
where the difference is greatest for the processes with the largest periods {prd Keyboard / Mouse 
was reduced from 92400 to 75600), and the LCM was also noticably reduced from 3 times 
the maximum adjusted period length to 1 times the maximum adjusted period length. □ 

[0206] The following [descriptionwe] description includes a procedure for constructing a 
feasible pre-run-time schedule for a given set of periodic processes with offsets. 

[0207] Procedure for constructing a feasible pre-run-time schedule for a given set of pe- 
riodic processes with offsets S p = {{o Pn r pn c pn d Pi ,prd Pi )\i = 0, 1, 

begin {procedure} 
success:= false; 

for all pi let prd Pi := adjustperiod^rd^.); 
prducM'- LCM(prd po ,prd pi , . . .,prd Pn )\ 
begin {for loops} 

for o Po \- offsetlowerbound(/?o) to offsetupperbound(po) do 
for o Px := offsetlowerbound(pi) to offsetupperbound(/?i) do 

for o Pi := offsetlowerboundQ?/) to offsetupperboundQ?;) do 

for o Pn := offsetlowerbound(/? rt ) to offsetupperbound(/?„) do 
begin {loop body} 
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Construct a schedule for all occurrences of all the processes in S p within 
the interval [0, max{o P/ |Vp,-}] + 3 * prduchi]\ 

If the following conditions are satisfied, then set success:= true; and exit 
from the procedure: 

There must exist a point / in the schedule, such that: 

(1) The subschedule in the interval [t, t + prdjjCM] is equal to the sub- 
schedule in the interval [t + prducM^ t + 2 * prd[£M]\ 

(2) All the occurrences of all processes in S p within the interval 
[f ,f + prducM\ must be included in the subschedule in [t,t + prdicM]\ 

(3) All the occurrences of all processes in S p within the interval 
[0,t + prdu:M] must satisfy all their respective timing constraints. 

end; {loop body} 
end; {for loops} 

if success is true then set the "initial part of the pre-run-time schedule" So(t) to be the 
subschedule in the interval [0, t], and set the repeating part of the pre-run-time schedule" 
SLCM{prducM) to be the subschedule in the interval [t, t + prdicM\\ 
end. {procedure} 

[0208] The optimal scheduling method in the aforenoted 1990 article by Xu and Par- 
nas that constructs a feasible schedule for a set of processes with release times, deadlines, 
precedence and exclusion relations, can be used for this purpose. If the processes are to 
be scheduled on more than one processor, the optimal scheduling method as described in the 
[aforenoted] 1993 article by J. Xu [and Parnas] "Multiprocessor Scheduling of Processes with 
Release times, Deadline, Precedence and Exclusion Relations," IEEE Transactions on 
Software Engineering, vol. 19, pp. 139-154, February, 1993, that constructs a non-preemptive 
feasible schedule for [as] a set of processes with release times, deadlines, precedence and ex- 
clusion relations on multiple processors, can be used for this purpose. Note that, it is not 
strictly necessary to use the scheduling method of the 1990 or the 1993 article. One may 
use any method for this step, the only requirements being that the method should be capable 
of constructing a feasible schedule for a set of periodic processes, in which all the specified 
constraints and dependencies between the processes are satisfied. 
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Example 4. 



[0209] Assume that the following precedence relations and exclusion relations must be 
satisfied for the processes in Examples 1-3 above: 

/?6 precedes p~i\ a2 excludes a?>,ag\ ai excludes wi^p^p^ ag excludes ai\ p4 excludes 
a 3iP5,P6i P5?P6 excludes p^\ p$ excludes p§\ p§ excludes a$ y p5. 

[0210] If the method in the aforenoted 1990 Xu and Parnas article is used to schedule all 
the P-h-k processes newp^^p^ps.pe.Pi using their adjusted computation times, the feasible 
schedule will be found in Figure 1. This guarantees that all the P-h-k processes are schedula- 
ble. 

□ 

[0211] In Example 4 above, a feasible schedule for the case where the offsets of all the 
periodic processes are zero was shown. Below is another example to show how the procedure 
given above can use existing methods to schedule a set of periodic processes together with a 
set of new periodic processes that were converted from asynchronous processes, where the 
original periodic processes and the new periodic processes may have non-zero offsets. 

Example B. 

[0212] Assume the following A-h-k process ua (see Figure 10): 
&a- c aA - 2; d aA = 7; min aA = 8. 

Assume also the following two periodic processes pb and p c (see Figure 11 and Figure 12): 
Pb' o Pb = 0; r PB = 1; c PB - 3; d Pb = 4; prd PB = 12. 
Pc- o pc = 7; r pc = 0; c PB = 4; d Pb = 4; prd PB = 12. 

Assume that the application requires pb.Pc to have fixed offset values of 0 and 7 respectively. 

[0213] Assuming that asynchronous process cia may make its first request at time 0, the 
procedure for converting a set of asynchronous processes into a set of periodic processes 
given earlier, could convert into the following new periodic process: 
newp A : r n€Wf?A = 0; c newpA = 2; d newpA = 2; prd newpA = 6; and 0 < o newpA < prd newpA -1=5. 
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The lowerbound of the offset of newpA is 0, and the upperbound of the offset of newpA is 5 
(see Figure 10 and Figure 13). 



[0214] The procedure for constructing a feasible pre-run-time schedule for a given set of 
periodic processes with offsets given above will try each offset value of o newpA within the 
permitted range of [0,prd newpA - 1] = [(0,5)] [0,5] , when trying to find a feasible schedule 
for new pa, pb> and pc- When the last value in that permitted range, o newpA = 5 is used, 
the method in the 1990 article by Xu and Parnas would find the feasible schedule illustrated 
in Figure 14. A feasible schedule is found for newp A , p B and p c , when o newpA = 5 and 
o PD = 2. It is assumed that the application requires that o Pc = 7, o PB = 0 and since asyn- 
chronous process cla may make its first request at time 0, the permitted range of offset is 
0 < Onewp A < prd newpA — 1 = 5. The feasible schedule consists of a non-repeating initial 
schedule Sq(1) for the interval [(0,1)] [0, 1] , and a repeating schedule Slca/(12) that is of 
length equal to the Least Common Multiple of the periods of newpA, pb, Pc, and which 
isLCM(6, 12, 12, 12)= 12. 

[0215] Assume that in addition to the periodic processes newp A , pb,Pc> the following 
periodic process po exists (as shown in Figure 15): 
PD- r pD = 2,c PD = 1, d PD = 4, prd PD = 13, 0 < o pD < 4. 

[0216] If the "adjustperiod" function is applied to the periods of newp A ,pB,Pc^ and po, 
then p D 's period prd Pd will be shortened from length 13 to length 12, resulting in the modified 
periodic process p D = (o PD ,r PD ,c PD ,d PD: prd PD where r PD = 2, c PD = 1, d PD = 4, prd PD = 12, 
0 < °pd ^ 4 , as shown in Figure 16. 

[0217] The other periods prd newpA , prd PB , and prd Pc remain unchanged after the adjust- 
period procedure is applied. 

Assuming that the application allows the offset of p D to be in the permitted range of [(0, 
4)] [0,4] , the procedure for constructing a feasible pre-run-time schedule for a given set of 
periodic processes with offsets given above will try each offset value of o newpA within the 
permitted range of [0,prd newpA - 1] = [(0,5)] [0^5], and try each offset value of o PD within the 
specified permitted range of [(0, 4)] [0,4] , when trying to find a feasible schedule for newp A , 
Pb, pc, and po- When the offset values o newpA = 5, and o PD = 2 as shown in Figure 17 are 
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used, the method descibed in the 1990 Xu and Parnas article would find the feasible schedule 
illustrated in Figure 18. 

[0218] As shown in Figure 17, the periodic process po = (o PD ,r PD ,c PD ,d PD ,prd PD where 
r pD = 2,c PD = 1, d PD = 4, prd PD = 12, 0 < o pD < 4, where the offset of po is set to a fixed 
value o PD = 2 [during run-time scheduling] by the procedure for constructing a feasible 
pre-run-time schedule for a given set of periodic processes with offsets when it attempts to con- 
struct a feasible pre-run-time schedule for newpA,PB,Pc,PD- 

[0219] As shown in Figure 18, a feasible schedule is found for newp Aj p B , pc, and p D , 
when o newpA = 5, and o PD = 2. It is assumed that the application requires that o pc = 7, o PB = 0, 
and 0 < o PD < 4, and asynchronous process a A may make its first [requrest] request at time 0. 
The feasible schedule consists of a non-repeating initial schedule 5o(l) for the interval [0,1], 
and a repeating schedule Slca* (12) that is of length equal to the Least Common Multiple of 
the periods of newp A , p B , pc, and p D , which is LCM(6, 12, 12, 12) = 12. 
The feasible schedule consists of a non-repeating initial schedule So(l) for the interval [0,1], 
and a repeating schedule Slcm( 12) that is of length equal to the Least Common Multiple of 
the periods of newp A , p B , pc, and po, which is LCM(6, 12, 12, 12) = 12. 
[The feasible schedule consists of a non-repeating initial schedule 5o(l) for the interval [0,1], 
and a repeating schedule Slcm(12) that is of length equal to the Least Common Multiple of 
the periods of newp At p B , pc, and p D , which is LCM(6, 12, 12, 12) = 12.] 
□ 

[0220] The following notation is used below to denote the beginning and end of the time 
slot of each process in a pre-run-time schedule, the actual start time and actual completion 
time of each process, and the most recent actual arrival time of an asynchronous process at 
run-time. This notation will be used extensively below. 

[0221] [s(p)] s(p): s(p) is the time of the beginning of the time slot that was reserved for 
periodic process p in the pre-run-time schedule. 

[0222] [S'(x)] s'(x); s'(x) is the actual time that periodic process or asynchronous pro- 
cess x was/will be put into execution at run-time. At any time f, if periodic or asynchronous 
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process x has been put into execution after or at time r, then / < sf(x) is true, otherwise 
< s f (x)] ->(t<s f (x)) is true. 

[0223] s*(p) depends on the arrival times of asynchronous processes aj and whether and 
at what time they preempt periodic processes. s*(p) also depends on the actual execution 
times of other processes that are executed prior to p's execution at run-time. 

[0224] [e(p)] e(p); e(p) is the time of the end of the time slot that was reserved for periodic 
process p in the pre-run-time schedule. 

[0225] [e'(x):] e'(x): e'(x) is the actual time at which asynchronous or periodic process 
x's execution ends at run-time. At any time f , if periodic or asynchronous process x's exe- 
cution has ended after or at time f, then t < e\x) is true, otherwise if jc's execution has not 
ended before or at time t, then [->r < ^(jc)] -<(f < e\x)) is true. 

[0226] [R'(a):] R'(a): R'(a) is the most recent actual arrival time of asynchronous process 
a at run-time. At any time t, if asynchronous process a has arrived before or at time t, then 
R\a) < t is true, otherwise [^R f (a) < t] ->(R f (a) < t) is true. At any time t y if asynchronous 
process a has arrived at least once before time t and after or at time 0, then 0<F!(a) is true, 
otherwise if a has never arrived before or at time r, then [^0 < R / (a)] ->(0 < R f (a)) is true. 

Example 5. 

[0227] In Figure 1, the time slot that is assigned to the P-h-k process pe in the feasible 
pre-run-time schedule begins at time 1 14, and ends at time 144, so s(p 6 ) = 1 14, e(p 5 ) = 144. 
The length of the time slot assigned to pe in the pre-run-time schedule is equal to the adjusted 
computation time of p 6 , i.e., c f p6 , which includes the time reserved in case p& is preempted 
by A-h-k-a processes with less latitude in an actual execution. 

[0228] Figure 2 shows a possible actual execution of the P-h-k processes when they are 
scheduled at run-time together with the A-h-k-a processes oq, a\, a 2 , a 9 , (the details are ex- 
plained in Example 7 below, see particlarly step 3). 

[0229] Note that in Figure 2 the relative order in which P-h-k processes are executed at 
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run-time, is kept the same as the relative order of the time slots that are assigned to those 
periodic processes in the feasible pre-run-time schedule in Figure 1. Note also that the length 
of the computation time indicated for each P-h-k process is its original computation time, not 
its adjusted computation time. For example, in Fig. 2, s^(pe) = 114, e f (pe) = 140. 
□ 
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Step 3: Determine the worst-case response times of the A-h-k-a processes 



[0230] A-h-k-a processes are scheduled at run-time by the A-h-k-a Scheduler Subroutine 
(see the description later which describes scheduling A-h-k-a processes), but their worst-case 
response times are determined before run-time in this step. Verification that each A-h-k-a 
process a t is schedulable is performed by checking the condition that a,'s latitude must be 
greater than or equal to its response time. 

[0231] Two different methods of determining the response time of an A-h-k-a process 
will now be described. The first method uses a mathematical formula to calculate the worst- 
case response time. The second method uses simulation to determine the worst-case response 
time. The second method gives tighter response times that can guarantee the schedulability 
of a larger number of cases, but requires a longer computation time. The first method, while 
not as accurate as the second method, is faster. In practice time can be saved by applying the 
first method first, and only applying the second method if the worst-case response time of 
some A-h-k-a process calculated by the first method exceeds the latitude of that process. 

[0232] "P-g" is the set of guaranteed periodic processes. In this step, P-g includes all 
the P-h-k processes, including those A-h-k-p processes that were translated into periodic pro- 
cesses. Later on, in Step 4, P-g is expanded to include all P-h-k and P-s-k processes. 

[0233] The worst-case response time of an A-h-k-a process a t can be determined in ac- 
cordance with the following method: 

For all a/ G A-h-k-a: 

RE ai = c Qi + Delay A(a h RE ai ) + DelayPfe,/^,.) + B(a t ) + GT(a h RE ai ) 
where 

RE 

Delay A(a i ,RE ai ) = 2 iaj eA-h-k-aAL aj <L ai Aj?i T^l -c aj 

and 

DelayP^,^,^!,.^^.^. . Cpj 

and 

B(a/) = max{c aj ,e(pi)-s(pi) \ (aj e A-h-k-a A L aj > L ai 
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AEbr*,.*:* G A-h-k-a Vjc^ g P-g: aj excludes Xk A L Xjk < L ai ) 
V (/>/ G P-g A L Pl > L ai 

/\3x^x k e A-h-k-a Vx* G P-g: pi excludes x^ A L Xk < L ai )} 

GT(a h RE ai ) = Excite) + Sp,eSG2(a,) T^l 

where SGI (a,) = {/>/ | /?/ G P-g A L pi < L ai A (a/ excludes p/)}; 
and SG2(ai) = {p/ | p/ g P-g A L Pl < L ai A(3aj G A-h-k-a: a t excludes aj 
ALaj<L pl )}\ 



[0234] It should be noted that in the above method, the value of c Pj is the original com- 
putation time of pj (it does not include the time reserved for A-h-k-a processes with less 
latitude). 

[0235] In a first assumption, for each A-h-k-a process a,-, for each RE ai computed by the 
above formula, if RE ai < L an a\ will always meet its deadline at run-time. 

[0236] The following procedure can be used to compute the worst-case response time of 
each A-h-k-a process: 

i:=0; 

failure= false; 

while i < number-of-A-h-k-a-processes and not(failure) do 
begin 

if a/ G A-h-k-a 

then 

begin 

responsetimefound:= false; 

while not(responsetimefound) and not(failure) do 

begin 
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REpreviousr— REneWi \ 

RE neWi = De\ayA(ai,RE pmi0ttSl ) + De\ayP(a h RE pr€V iousi) 
+ B(a/) + GT(a h RE previouSi ); 

if RE previousi ~ RE new i 

then 
begin 

RE ai := RE neWi 

responsetimefound:= true; 

end 

if (RE neWi > L ai ) 
then failure:= true 

end; 

end; 

i:=i + 1; 

end 

Example 6. 

[0237] If the procedure and formula described in this specification is used to calculate 
the worst-case response times of the A-h-k-a processes in Examples 1-5 above, the following 
should be computed: 
REqq — Q*o — 2 < L aQ — 2 

RE ax = c ax +\RE ai /min ao ']c ao = 2 + [7/ 1000] 2 = 4 < L ax = 7 
Delay A(a 2 ,RE a2 )= \RE a2 /min ao ]c ao +\RE a2 /min ai ]c ai =2 + 2 = 4 
Dt\ayP(a 2 ,RE a2 )=\RE a2 /prd newp3 ]c newp3 +\RE a2 /prd P4 ]c P4 + \RE a2 /prd P5 ']c P5 
+ \RE a2 /prd P6 ]c P6 +\RE a2 /prd pi )c pi = 20 + 26 + 16 + 26 + 16 = 104 
B(a 2 ) = Ca 9 = 10 

GT(a 2 ,RE a2 ) = \RE a2 /prd newp3 ]ca 2 = 20 

RE a2 = c a2 + Delay A(a 2 ,RE a2 ) + DelayP(a 2 ,/f^ 2 ) + B(a 2 ) + GT(a 2 ,RE a2 ) = 10 + 4 + 104 + 
10 + 20 = 148 < L a2 = 239 

DelayA(a 9 ,/?£a 9 )= iRE^/min^c^ + \RE a9 /mina } ]c ai + \RE a9 /min a9 ]c a9 = 2 + 2 + 10 = 
14 
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DelayP(a 9 ,/?£ , fl9 )= \RE a9 /prd n€wp3 ]c newp3 +\RE a9 /prdp A ]c P4 + \RE a9 /prd p$ ]c P5 
+ \RE a Jprd P6 \c P6 + \RE a9 /prd Pl ~\c Pl = 20 + 26 + 16 + 26 + 16 = 104 
B(a 9 ) = 0 
GT(a 9 ,RE a9 ) = 0 

REa 9 = c a9 + DelayA(a 9) /?£ a9 ) + DelayP(a 9j /?^ 9 ) + B(a 9 ) + GT(a 9 ,RE a9 ) = 10 + 14 + 104 
= 128 < L a2 = 259 

[0238] Since the worst-case response time of every A-h-k-a process is less than or equal 
to its deadline, it is thus guaranteed that they are all schedulable. 

□ 

[0239] Below, the second method which uses simulation will be described to determine 
the worst-case response time of an A-h-k-a process in a feasible pre-run-time schedule of 
guaranteed periodic processes, which consists of an initial part of the pre-run-time schedule 
So('o), which is a subschedule in the interval [0, to]; and a repeating part of the pre-run-time 
schedule Si£M{prdix:M)<> which is a subschedule in the interval [to Jo + prducM\> 

[0240] This method uses the functions of the A-h-k-a Scheduler and the Main Run-Time 
Scheduler, which are described [in] below in the section related to the run-time phase. 

[0241] A method for computing the worst-case response time of an A-h-k-a process a t cor- 
responding to a feasible pre-run-time schedule of guaranteed periodic processes consisting of 
an initial part of the pre-run-time schedule Sofa), in the interval [0, to]; and a repeating part 
of the pre-run-time schedule [SwMprducM] SucMjprducM) , in the interval [t 0 ,t 0 + prducM] 
follows. 

fail:= false; 

for t s \- 0 to to + prducM - 1 do 
begin 



68 



For each A-h-k-a process at, such that at G A-h-k-a A L ab > L ai AEh;*, jc* G A-h-k-a 
Vx* G P-g: at, excludes x^ A L Xk < L an do the following: 

let cib arrive at time t s — 1, and use the A-h-k-a Scheduler and Main Run-Time 
Scheduler to schedule at and a/ to obtain a response time of a/, called RE\ (a/, f s , a&), 
corresponding to each at according to the assumptions (l)-(6) below, with the ad- 
ditional assumption that at, can always start its execution at time t s — 1 (including 
when t s = 0) except if at time t s — 1 there exists some periodic process p, such 
that t s < s(p) and (at cannot Jbe, preempted -by p) AL Qb > L p , and executing a& 
at time t s - I may cause p to miss its deadline, that is, at is delayed by the con- 
ditions in either Case 1 or Case 5 of the A-h-k-a Scheduler. At time t = t s - 1, 
assume that the condition "sf(p) > f" is true for every periodic process p such that 
t s < s(p) when checking whether at should be delayed by the conditions of Case 
1 or Case 5 of the A-h-k-a Scheduler. When computing RE\ (a/,r 5 ,a^), if 3p/,/?/ G 
P-g As(pi) <t s < e(pi) 9 then assume that p\ has already completed at time t s - 1, 
that is, this instance of p\ will not have any effect on at, a,-, or any other process in 
the system. 

{Let each A-h-k-a process at that can possibly block a,-, arrive at time t s -l 

and determine which one among them will block a t for the greatest amount of time.} 

After obtaining RE\(a u t s ,a^) for every such a b , use the A-h-k-a Scheduler and 
Main Run-Time Scheduler to schedule a t to obtain another response time of 
a;, called RE2(a il t s ), according to the assumptions (l)-(6) below, with the addi- 
tional assumption that no A-h-k-a process a b , such that at G A-h-k-a A L Qb > L Qi 
A3xi c ,x/ C G A-h-k-a Vx* G P-g: at excludes Xk A L Xk < L ai had ever arrived. 
When computing RE 2 (a h t s ) 9 if 3p h pi G P-g As(pi) <t s < e(pi), then assume that 
s'(pi) = s(pi) A e f (pi) = e(pi)\ {i.e., p { started at the beginning of its time slot and 
will complete its computation at the end of its time slot in the pre-run-time schedule 
that was computed using adjusted computation times. 

(1) ai arrives in the system at time t 5 . 
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(2) Unless a x is delayed because of the conditions in Case 1 or Case 5 of the A-h-k-a 
Scheduler, (see (3) below), let every other A-h-k-a process ay, such that L aj < L ai ar- 
rive at the following instants in time: R aj (k) =t s + Ic* min aj ,£ = 0,1,2,..., J , 
and be scheduled before a x whenever a; and ay have both arrived and a; has not 
yet started. If ay is delayed by any of the conditions in Cases 1-7 of the A-h-k-a 
Scheduler, then let a f be delayed by the same amount of time. 

{ all other A-h-k-a processes whose deadlines are shorter or equal to a;'s deadline 
arrive at the same time as a; at time f 5 , and are put into execution before a,-.} 

(3) Whenever the conditions in Case 1 or Case 5 of the A-h-k-a Scheduler become 
true for a; and some P-h-k process p at some time t, i.e.: if 3p,p G P-g: 

s f (p) > t A (a; cannot Jbe. preempted -by p) AL ai > L p 
A(fipi,Pi € P-g: s(pi) < s(p) < e{p) < e(p t ) AL pi < L a ) 

A(flpi,pi G P-g: s(p) < s(pi) < e(pi) < e(p) A (a; cannot Jbe -preempt edJby /?/)) 
A (fipmiPm G P-g: t < s'ipm) A e(p m ) < s(p) A La. < L Pm ) 

A (e(p) -t)< C ai + Ip^p-g A t<s( Pl )<e(p) A ^{pi)<t) A L pi <L a . Cpi + 
La k eA-h-k~a A d afc <d p A H0</?'(ajt)) V (R'(a k )<tA->(e'(a k )<t)) V {R* {a k )+min ak <e{p))) 
' mina k I Ca k 

or 

if pi ,p,p\ GP-g: 

s f (p) > t As(p) < s(p\) < e(p\) < e(p) A (a; cannot Jbe. preempt edJby p\)t\L ai > 
A (fiPm,Pm € P-g: t < s'(p m ) A e(p m ) < s(p) A L a . < L Pm ) 

A (s(p)-t) < C aj + E P/G P-g A -(e'(p,)<f) A t<s{p,)<e(p,)<s{p) c pi 

+ Za k eA-h-k-a A L„ k <L p /\ H0<R' (a k )) V {R'(a k )<tA^(e'(a k )<t)) V (R'{a k )+min ak <s(p))) 

r s (p)-' -\ c 

I min ak I ^ a k 
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let t also be the earliest time that the conditions in Case 1 or Case 5 become true for 
that instance of p and a;, 

then for every other A-h-k-a process ay that belongs to the following set: 
{aj\aj G A-h-k-a A j ^ i A L aj < L ai A 

(W0<R'(aj)) V (R f (aj)<tA^(e'(aj)<t)) V (R f (aj) +min aj < e(p))) 
V (s'(a b ) < t s A t - 1 < e\a h ) A s*(aj) < t))} 

(aj has a deadline that is shorter than or equal to a;'s deadline and, either aj has 
never arrived; or aj has arrived but has not completed its computation; or aj may 
arrive again before time s(p); or at time t - 1 a,- was blocked by and aj started its 
execution before t), 

"delay" a/s arrival time to occur at time s(p)\ if at time s(p) the conditions in Case 
1 or Case 5 of the A-h-k-a Scheduler continue to be true for some other periodic 
process p\ then a,- should be delayed again, and the A-h-k processes dj that satisfy 
the conditions of the formula for p 1 should also be delayed again until s(p'); other- 
wise assume that aj arrives at s(p), and is scheduled before a\\ and assume that p 
starts executing at time s(p) + ^ a ^ A _ h ^ a A L(ik<Lp c av 

For each such aj, let only a single instance of aj arrive at time s(p), even if origi- 
nally there could be several instances of a same process ay that satisfy the conditions 
above. 

For each such ay's subsequent arrival times after s(p), use the same arrival times 
that were determined in (2), i.e., ay's subsequent arrival times after s(p) will be: 
R aj (k) = t s + k * min aj such that R Uj (k) > s(p) . 
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(If at time t there exists more than one process p for which the conditions of either 
Case 1 or Case 5 are true for p and a/, then let the above apply to the process p 
among them that has the latest s(p) time in the pre-run-time schedule.) 
{ if at is delayed due to the conditions in Case 1 or Case 5, then an A-h-k-a process 
aj could delay a,- by a maximum amount by arriving at s(p).} 

(4) If the end of the current instance of the repeating part of the pre-run-time sched- 
ule is reached, continue at the beginning of the next instance of the repeating part 
of the pre-run-time schedule. 

(5) If a/'s deadline d ai is reached but a,- has not yet completed its computation, then 
set fail:= true and exit from the procedure. 

(6) If a/'s computation is completed before its deadline d an then record the comple- 
tion time of at as the response time of a x (either RE\ (a,-, t Sy a^) for the current or 
RE2{di,t s ) when no such is assumed to have arrived at time t s — 1). 

After the response time RE\{a u t^a^) corresponding to every at, that may block a x 
has been computed, and the response time RE2{ai : t s ) that assumed that no such 
at had arrived and blocked a t has also been computed, set the response time of 
a t with arrival time f 5 , RE(ai,t s ) to be equal to the greatest among them, i.e., 
RE(ai,t s ) = max{RE\(ai,t s ,ai ? ) } RE2{ai)t s )}, and exit from the current iteration of 
the loop for this value of t SJ and start the next iteration for t s := t s + 1. 

end; 

if not fail then 

RE ai := max{RE(a h t s ) \t s = 0, 1,...,LCM- 1}; 

[0242] (A description will be found below of scheduling of the A-h-k-a processes, of the 
A-h-k-a Scheduler and of definitions of the terms used above.) 

[0243] it is assumed in a second assumption that for each A-h-k-a process a u for each RE ai 
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determined in the above procedure, if RE a . < L an a; will always meet its deadline at run-time. 
Example 7. 

[0244] If the second method is used, that is, the simulation procedure above, to determine 
the worst-case response times of the A-h-k-a processes in Examples 1-6 above, the procedure 
will find the following. 

[0245] [RE ao }] RE ao : The maximum value of RE(ao,t s ) will happen when ao arrives at 
time t s = 0. Since no process excludes ao, and ao has the minimum latitude among all pro- 
cesses, ao will always be put into execution immediately after it arrives, thus oo's response 
time RE ao = RE{a 0 ,0) = max{/?£(o 0) r,)} = [c fl J] = 2 [<= L^}] < L ao = 2 . 

[0246] RE ax : The maximum value of RE(a\ , t 5 ) will happen when a\ arrives at time t s = 0. 
Since no process excludes a\ f and only one process ao has less latitude compared with a\ J s 
latitude, when a\ arrives at time t s = 0, assuming that ao will also arrive at time t s = 0, a\ 
will only be delayed by ao's execution time, thus a\ 's response time RE ax - max{/?£(ai,r 5 )} 
= RE(a u O)=c ao +c ai =2 + 2 = 4 <L ai =7. 

[0247] RE a2 : The maximum value of RE(ai,t s ) will happen when a2 arrives at time 
t s = 82 but ag arrived one time unit earlier at t s - 1 = 81, so ag blocks a,2 at time 82. Accord- 
ing to rule (2) in the simulation procedure, it is first assumed that oo and a\ will also arrive 
at time t s = 82, and will be put into execution from time 82 to 86, preempting ag. After ao 
and ai's completion, ag will resume at time 86 and complete its computation at time 95. At 
time 95, a2 will be delayed by the conditions of Case 1 of the A-h-k-a Scheduler, because 
e(newp3 { ) - 1) = 114 - 95 = 19 < c ai + c newp3 = 10 + 10 = 20. According to rule (3) in the 
simulation procedure, since at time 95 ao and a\ belong to the set: 
{aj\aj e A-h-k-a A j ^ i A L aj < L ai A 

V (^(fly)<fA-(^(fl y -)<0) V(R'(aj) + min aj <e(p))) 
[A] V (J(a b ) < t s A t - 1 < e'(a b ) A s f {aj) < t))} 

because ao € A-h-k-a A a 0 ^ a 2 A < d Q2 A {s\ag) < t s = 82 A t - 1 = 95 - 1 = 94 
< e\ag) -95 A ^(a 0 ) = 82 < t = 95. 

(at time t - 1 = 95 - 1 = 94 a 2 was blocked by ag C'a^")» and a 0 ("a" ) started its execution 
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before t = 95). a\ also meets the above conditions similar to ao. According to rule (3) in the 
simulation procedure, ao and afs arrival times are "delayed" to occur at time s{newp$ x ) = 
100 and are scheduled before a 2 to execute from time 100 to 104; newp^ starts executing at 
time s(newp3 x ) + c aQ + c ax = 100 + 2 + 2 = 104, and completes its execution at time 1 14. As 
L P6 = 200 < L ai = 239 and L Pl = 200 < L ai = 239, p 6 will execute from 1 14 to 140; p 7 will 
execute from 140 to 156; a 2 will execute from 156 to 166. Thus a 2 s response time RE ai = 
meLx{RE(a 2 ,t s )} = RE(a 2 ,S2) = e f (a 2 )-R a2 = 166 - 82 = 84 < L a2 = 239. 
In effect, the simulation procedure computes a response time of a 2 that is equal to a 2 s re- 
sponse time in the case that is illustrated in Fig. 2 in Appendix 1, where ag arrives at time 
81, a 2 arrives at time 82 and is blocked by ag until time 91; at time 91 a 2 is delayed by 
the conditions of Case 1 of the A-h-k-a Scheduler, because e(newp$ x ) - 1) = 114 - 91 = 23 
< c a2 [}] + = 10 + 10 + 2 + 2 - 24. ao and a\ arrive at time s{newpi x ) = 100. 

[0248] RE a9 : The maximum value of RE(ag,t s ) will happen when ag arrives at time 
t s = 100; ao and a\ also arrive at time 100 and execute from time 100 to 104; newpi executes 
from time 104 to 1 14; As L P6 = 200 < L ai = 239 and L pi = 200 < L a2 = 239, p 6 will execute 
from 114 to 140; p-j will execute from 140 to 156; a 2 will execute from 156 to 166. Finally 
ag will execute from time 166 to 176. Thus a 9 's response time RE ag = m&x{RE(a 9 ,t s )} = 
RE{a 9 , 100) = e\ag) -R a9 = 176 - 100 = 76 < L a9 = 259. 

[0249] Since the worst-case response time of every A-h-k-a process is less than or equal to 
its deadline, [is] it is possible to guarantee that they are all schedulable. Note that the worst- 
case response time of a 2 determined by the simulation procedure is 84 and is tighter than the 
worst-case response time of 148 determined by the formula in the first method. The worst- 
case response time of ag determined by the simulation procedure is 76 and is also tighter than 
the worst-case response time of 128 determined by the formula in the first method. 
□ 

[0250] In Example 1, none of the processes had offsets; consequently the length of the 
initial part of the pre-run-time schedule was 0. Below, another example is described in which 
the periodic processes have offsets, and the initial part of the pre-run-time schedule is of non- 
zero length. 



74 



Example C 



[0251] [Suppose] Assume it is desired to schedule the same set of processes a A , pb<> Pc> Pd 
given in Example [A] B. The user can control the probability of each asynchronous process 
being converted into a periodic process or remaining asynchronous, by setting the threshold 
values in the procedure for converting a set of asynchronous processes into periodic processes 
given earlier. 

[0252] Assume that the value chosen for the threshold for a A was large and asynchronous 
process a A was not converted into a new periodic process. The procedure for scheduling a set 
of periodic processes with offsets will construct the pre-run-time schedule for the processes 
Pb, PC, Pd illustrated in Figure 19. Assuming a A is to be scheduled by the A-h-k-a Scheduler 
using the information in the pre-run-time schedule, the simulation procedure will determine 
that flu's worst-case response time will happen when a A makes a request at time 6. At time 6, 
a A will be delayed by the conditions in Case 1 of the A-h-k-a Scheduler. a A will be executed 
from time 1 1 to time 13 after p c has completed. a A s response time is RE(a A ,t s ) = RE(a A ,6) 
= e\a A ) - s*(a A ) = 13 - 6 = 7 < d aA = 7. In this case a A is also guaranteed to always meet its 
deadline. 
□ 

[0253] The simulation procedure above, is more accurate than the formula given earlier 
for determining the worst case response times of A-h-k-a processes, because the simulation 
procedure takes into account knowledge about the positions of the periodic processes in the 
pre-run-time schedule. In contrast, the earlier formula does not take into account such knowl- 
edge, and assumes that in the worst case, all periodic processes may arrive at the same time. 
Note that currently, none of the algorithms and protocols in the prior art that perform all 
scheduling [activitwees] activities at run-time, can avoid making the latter overly pessimistic 
assumption in their schedulability tests. 

[0254] If it is determined that the deadline of some hard deadline process cannot be met, 
that is, if a feasible pre-run-time schedule does not exist for the given set of P-h-k processes, 
or if the worst-case response time of some A-h-k-a process exceeds its deadline, then one 
may have to modify the characteristics of or remove one or more P-h-k or A-h-k-a processes. 
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[0255] In the first case, the pre-run-time scheduling algorithm [24] will identify the criti- 
cal set, that is, the subset of P-h-k processes for which either modifying the characteristics of 
one or more processes in that set, or removing one or more processes from that set is neces- 
sary to meet the deadlines of all the P-h-k processes. 

[0256] In the second case, the formula or simulation procedure for calculating the worst- 
case response time of each A-h-k-a process can be used to identify which processes should 
be modified or removed, in order to meet the deadlines of all the A-h-k-a processes. 

[0257] After the user has modified the characteristics of, or removed one or more P-h-k 
or A-h-k-a processes, the method will be applied again. The initial determination and any 
subsequent modification of process characteristics by the user depends on the specific user 
application requirements and is outside the scope of this specification. This process must be 
repeated until there exists a feasible schedule for all the hard-deadline processes. 
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Step 4: A feasible pre-run-time schedule for the P-s-k and P-h-k processes is con- 
structed. 

[0258] After guaranteeing the schedulability of all the processes with hard deadlines, 
the set of periodic processes with soft deadlines and known characteristics (P-s-k processes) 
is scheduled together with the set of all periodic processes with hard deadlines and known 
characteristics (P-h-k processes), and a feasible pre-run-time schedule for these processes is 
constructed. 

[0259] Each P-s-k process is assigned an integer, called its "criticality level." Each P-s-k 
process is also assigned, in addition to its normal deadline, a "deadline upper-limit." 

[0260] The computation times of the soft-deadline periodic P-s-k processes are modified 
in the same way as for the hard-deadline periodic P-h-k processes. 

[0261] If it is determined that a feasible schedule does not exist, then the method will 
identify the soft critical set, that is, the subset of soft-deadline processes for which either 
modifying the characteristics of one or more processes in that set, or removing one or more 
processes from that set, is necessary to meet the deadlines of all hard-deadline processes. 
The method will select one process that has the lowest criticality level among the processes 
in the soft-critical set and increase the deadline of that process by an amount that does not 
exceed the deadline upper-limit of that process and attempt to find a feasible schedule again. 
The deadline of the process with the lowest criticality level will be incremented until one of 
the following happens: either a) a feasible schedule is found; or b) the previously selected 
process does not belong to the newly computed critical set; or c) the revised deadline of that 
process cannot be further increased without exceeding the deadline upper-limit. In the latter 
two cases, the method will select another process that has the lowest criticality level among 
all processes in the soft critical set and for which the deadline has not yet been revised, incre- 
ment its deadline, and attempt to find a feasible schedule again. 

[0262] If it is determined that a feasible schedule still does not exist after the deadlines 
of all the processes in the soft critical set have been revised and their deadline upper-limits 
have been reached, the method will provide the user with the list of soft-deadline processes 
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in the soft critical set for which modifying the characteristics of one or more processes in 
that set or removing one or more processes in that set is necessary to meet the deadlines of 
all hard-deadline processes. After the user has modified the characteristics of one or more 
processes in the soft critical set, or removed one or more processes in that set, the method 
will be applied again. The procedure will be repeated until there exists a feasible schedule 
for all the P-h-k and P-s-k processes. Again, the initial determination and any subsequent 
modification of process characteristics by the user depends on the specific user application 
requirements and is outside the scope of this specification. 

[0263] After a feasible schedule has been found for all the P-h-k and P-s-k processes, the 
worst-case response times for all the A-h-k-a processes are recomputed with the set of P-s-k 
processes included in the set of guaranteed periodic processes P-g. If the worst-case response 
time of any A-h-k-a process a\ exceeds its deadline, the method will select one process that 
has the lowest criticality level among all P-s-k processes that contribute to a/'s worst-case 
response time and increase the deadline of that P-s-k process by an amount that does not 
exceed its deadline upper-limit and recompute the worst-case response time. The deadline 
of the process with the lowest criticality level will be incremented until one of the following 
happens: either a) the worst-case response time of every A-h-k-a process is less than or equal 
to its deadline; or b) the previously selected process does not belong to the newly computed 
set of P-s-k processes that contribute to a{% worst-case response time; or c) the revised dead- 
line of that process cannot be further increased without exceeding the deadline upper-limit. 
In the latter two cases, the method will select another process that has the lowest criticality 
level among all P-s-k processes that contribute to a,'s worst-case response time and for which 
the deadline has not yet been revised, increment its deadline, and compute the worst-case 
response time again for each A-h-k-a process. 

[0264] If it is determined that the worst-case response time of some A-h-k-a process still 
exceeds its deadline after the deadlines of all the processes that contribute to a{% worst- 
case response time have been revised and their deadline upper-limits have been reached, the 
method will provide the user with the list of soft-deadline processes in the set that contribute 
to a;'s worst-case response time for which modifying the characteristics of one or more pro- 
cesses in that set or removing one or more processes in that set is necessary to meet the 
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deadlines of all the A-h-k-a processes. After the user has modified the characteristics of one 
or more processes that contribute to a/'s worst-case response time, or removed one or more 
processes in that set, the method will be applied again. The procedure will be repeated until 
the worst-case response time of every A-h-k-a process is less than or equal to its deadline. 

[0265] At the end of Step 4 the method will generate a feasible pre-run-time schedule 
for all the P-h-k, and P-s-k processes, while guaranteeing that the worst-case response times 
of all the A-h-k-a processes will be less than or equal to their deadlines. The set of P-h-k 
and P-s-k processes will be referred to as the set of guaranteed periodic processes (P-g). A 
simplified procedure for implementing Step 4 will be described later. 

Example 8. 

[0266] Assume that in addition to the hard deadline processes described in Examples 1-7 
above, the following periodic process has a soft deadline and known characteristics (P-s-k 
process). 

p 8 : #p 8 = 20,c P8 = I6,d ps = 55, prd p% = 200 , o p% = 0; 

Assume further that /? 8 's criticality is 3, its deadline upperlimit is 100. 

[0267] p 8 's adjusted computation time is: 
c p% = c p%+ c a 0 + c ai = 16 + 2 + 2 = 20. 

[0268] Firstly it will be determined that no feasible schedule exists for the given set of 
process parameters. The optimal schedule for the given set of parameters is the same as the 
schedule shown in Figure 3, except that d p% = 55 and /? 8 is late by 5 time units. The soft crit- 
ical set contains one process p 8 . The simplified procedure for Step 4 referred to above will 
increase the deadline of p% until d p% f = 60, at which point the feasible schedule is obtained, 
as shown in Figure 3. 

[0269] If the formula in the first method is used to calculate the worst-case response times 
of the A-h-k-a processes the following is obtaained: 

RE ao , RE ax remain the same as in Step 3, and are less than La 0 and L ax respectively. 
DelayA(02,KE<i 2 )= \RE a2 /min aQ ]c aQ +\RE a Jmin ai ]c ai =2 + 2 = 4 
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DelayP(a 2 ,/?£a 2 )= \RE a2 / ' prd^p^c^^ + \RE a2 /prd P4 ]c Pi + \RE a2 /prd P5 ]c P5 
+ \RE a2 /prd P6 ]c P6 +\RE a Jprd pi ~\c Pl + \RE a2 /prd Pg ]c pg 
= 20 + 26 + 16 + 26 + 16 + 16 = 120 
B(a 2 ) = c a9 = 10; 

G7(a 2 ,RE a2 ) = \RE a J prd newpi ~\c a2 = 20 

RE a2 = Ca 2 + DdayA(a 2 ,RE a2 ) + DelayP(a 2 ,RE a2 ) + B(a 2 ) + GT(a 2 ,RE a2 ) = 10 + 4 + 120 + 
10 + 20 = 164 < L a2 = 239 

Delay A(a 9 ,RE a9 )= iRE^/min^c^ +\RE a9 /min ai ]c ai +\RE a9 /min a2 ]c a2 = 2 + 2 + 10 = 
14 

De\ayP(a 9 ,RE ag ) = \RE ag / 'prd mwp ^\ 

c newp 3 + \RE a9 /prd p4 }c P4 +\RE a9 / prd p5 ]c P5 
+ \RE a9 /prd p6 ~\c P6 +\RE a Jprd Pl \c Pl + \RE a9 /prd Ps ]c ps 
= 20 + 26 + 16 + 26 + 16 + 16 = 120 
B(a 9 ) = 0; 
GT(a 9 ,#£fl 9 ) = 0; 

RE a9 = c ag + DelayA(a 9 ,#£a 9 ) + DelayP(a 9j /?£ a9 ) + B(a 9 ) + GT(a 9j RE a9 ) = 10 + 14 + 120 
= 144 < L a9 - 239 

[0270] if the second method is used, that is, the simulation procedure above to calculate 
the worst-case response times of the A-h-k-a processes in the examples above, the procedure 
will find the following. 

ao's response time RE ao and a\'s response time RE ai will remain the same as in Example 6, 
that is: 

RE ao = RE(a 0l 0) = max{RE(a 0 ,t s )} = = 2 < d ao - 2. 

RE ai = mzx{RE(a h t s )} = RE(a h 0) = c ao + c ax = 2 + 2 = 4 < d ai = 7. 

RE ai : The maximum value of RE(a2,t s ) will happen when ai arrives at time t s — 182 but 

ag arrived one time unit earlier at t s - 1 = 181, so ag blocks a2 at time 182. According to 

rule (2) in the simulation procedure, it is first assumed that oq and a\ will also arrive at time 

t s = 182, and will be put into execution from time 182 to 186, preempting a 9 . After ao and 

afs completion, ag will resume at time 186 and complete its computation at time 195. At 

time 195, a2 will be delayed by the conditions of Case 1 of the A-h-k-a Scheduler, because 

e(newp3 Q ) - 1) = 214 - 195 = 19 < c Q2 + c newp3 = 10 + 10 = 20. According to rule (3) in the 

simulation procedure, since at time 195 oq and a\ belong to the set: 
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{aj\aj G A-h-k-a A j ^ i A L aj < L ai A 

((-(0 < R*( aj )) V (#( aj ) <t^{ef{aj) < t)) V (R'(cij) +min aj < e(p))) 
V (s'(a b ) < t s A t - 1 < e'(a*) A s'(a,) < t))} 

because ao G A-h-k-a Aa 0 ^a 2 A < L fl2 A (s'(a 9 ) < r, = 182 A r - 1 = 195 - 1 = 194 
< e'(a 9 ) = 195 A s f {a 0 ) = 182 < t = 195. 

(at time t - 1 = 195 - 1 = 194 a 2 was blocked by ag ("flfc") and ao ("a") started its execution 
before t = 195). a\ also meets the above conditions similar to ao. According to rule (3) in the 
simulation procedure, ao and a\ 's arrival times are "delayed" to occur at time s(newp$ Q ) = 200 
and are scheduled before a 2 to execute from time 200 to 204; newpi starts executing at time 
s(newpi 0 ) + c ao +c ai = 200 + 2 + 2 = 204, and completes its execution at time 214; a 2 starts at 
time 214 and executes until time 220. As L ps = d' p% - r ps = 260 - 220 = 40 < L ai = d ai = 239, 
L P5 = d P5 ~ r P5 = 250 ~ 230 = 20 < L a 2 = d a2 = 2 39, and L PA = d PA - r P4 = 200 - 0 = 200 < 
L a2 = d a2 = 239; will preempt a 2 at time 220; pg, p 5j p4 will execute from time 220 
to 278; a 2 will resume execution from time 278 to 282; Thus a 2 s response time RE a2 - 
mzx{RE(a 2 ,t s )} = RE(a 2y 182) = e\a 2 )-R a2 = 282 - 182 = 100 < L ai = 239. 

[0271] Figure 4 illustrates a possible run-time execution of the A-h-k-a processes oq, a\ 9 
a 2 , ^9, together with the P-h-k and P-s-k processes of Figure 3. The worst-case response time 
of A-h-k-a process a 2 is RE a2 = max{RE(a 2 ,0} = RE(a 2 ,182) = e f (a 2 ) - R a2 = 282 - 182 = 
100, as computed in Step 4. 

[0272] In effect, the simulation procedure computes a worst-case response time of ai that 
is equal to the response time of a 2 in the case that is illustrated in Figure 4, where ag arrives at 
time 181, a 2 arrives at time 182 and is blocked by ag until time 191; at time 191 a 2 is delayed 
by the conditions of Case 1 of the A-h-k-a Scheduler, because e(newp$ 0 ) - 1) = 214 - 191 = 
23 < c a2 + - 10 + 10 + 2 + 2 = 24. ao and a\ arrive at time s(newps 0 ) = 200. 

[0273] RE a9 : The maximum value of RE(ag,t s ) will happen when ag arrives at time 
t s = 200; ao and a\ also arrive at time 200 and execute from time 200 to 204; newpi exe- 
cutes from time 204 to 214; a 2 starts at time 214 and executes until time 220. As L p% < L a2 , 
L P5 < La 2 , and L P4 < L Q2 \ pg will preempt a 2 at time 220; p$, ps, Pa will execute from time 
220 to 278; a 2 will resume execution from time 278 to 282; Finally ag will execute from time 
282 to 292. Thus a 9 's response time RE a9 = max{RE(ag,t s )} = RE(ag, 100) = e f (ag) - R a9 = 
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292 - 200 = 92 < L aQ = 259. 



[0274] Since the worst-case response time of every A-h-k-a process is less than or equal to 
its deadline, it thus can be guaranteed that they are all schedulable. Note again that the worst- 
case response time of a2 determined by the simulation procedure is 100 and is tighter than the 
worst-case response time of 164 determined by the formula in the first method. The worst- 
case response time of ag determined by the simulation procedure is 92 and also is tighter than 
the worst-case response time of 144 determined by the formula in the first method. 

[0275] Figure 3 illustrates the feasible pre-run-time schedule in which each guaranteed 
periodic process reserves a time frame that includes reserved processor capacity for any A-h- 
k-a process that has a shorter deadline than that guaranteed periodic process's deadline. 
□ 
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Step 5: Determine the worst-case response times of the A-s-k processes 



[0276] A-s-k processes are scheduled at run-time by the Main Run-Time Scheduler, but 
their worst-case response times are determined before run-time in this step. A-s-k processes 
are scheduled at a lower priority than the A-h-k-a, P-h-k, P-s-k processes. That is, A-s-k 
processes are executed only when there does not exist any A-h-k-a, P-h-k, or P-s-k process 
that is ready for execution. If more than one A-s-k process are competing for execution, the 
process with the shortest deadline will be chosen for execution. An A-s-k process is not al- 
lowed to have any precedence relation with any other process. An A-s-k process a, is also 
not allowed to have any exclusion relation of the form a; excludes x where x is an A-h-k-a, 
P-h-k, or P-s-k process. These restrictions are imposed in order to prevent A-s-k processes 
from causing any delay to A-h-k-a, P-h-k, or P-s-k processes, so that one can guarantee that 
all the hard deadlines will be satisfied, and also provide firm response time guarantees for all 
the processes with known characteristics. 

[0277] Two different methods of determining the worst-case response time of an A-s-k 
process will now be described. The first method uses a mathematical formula to calculate the 
worst-case response time, and is very similar to the formula described in Step 3 for determin- 
ing the worst-case response time of an A-h-k-a process, except that: 

(a) all A-h-k-a, P-h-k and P-s-k processes have higher priority than any A-s-k process 4, so 
their execution times are included together with the execution times of A-s-k processes that 
have shorter deadlines than at in the terms Delay(a;, RE ai ) and Delay(a/,/?£^.); 

(b) because an A-s-k process cannot exclude a P-h-k, P-s-k, or A-h-k-a process, the term 
GT(ai,RE ai ) is not required in the formula; and 

(c) the term B(a;) only needs to consider the blocking time due to A-s-k processes that have 
greater deadlines than a,-. Because the rest of the formula in Step 3 is basically the same as 
the formula used here, to avoid repetition, the complete definition of the formula used here is 
provided [in Appendix 3] later in this specification . 

Example 9. 

[0278] Assume the following asynchronous process with a soft deadline and known char- 
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acteristics (A-s-k process): 

<2io: c ai0 = 10, d ai0 = 300, min a{0 = 300. 

[0279] The procedure to be described below for determining the response time of the A- 
s-k processes is used to determine the worst-case response time of the A-s-k process aio[, the 
following will be processed]: 

DelayA(aio,/?£a lo )= \RE ax Jmina^\ca^ + \RE ai0 /min ax }c ai +\RE aiQ /min a2 ]c a2 
+ \RE ai0 /min a9 ] c ag = 2 + 2 + 10 + 10 = 24 

DelayP(ai 0 ,/?£a 10 )= \RE aw /prd newp3 }c ne „ P3 +\RE ai0 /prd P4 \c P4 +\RE axQ /prd P5 ]c P5 
+ \RE aw /prd P6 ]c P6 +\RE ai0 /prd pi ]c Pl + \RE ai0 /prd Ps ]c Ps =20 + 26 + 16 + 26 + 16 + 16 
= 120 
B(aio) = 0 

RE axo = c am + DelayA(aio,#£a 10 ) + DelayP(ai 0 ,/?£a 10 ) = 10 + 24 + 120 = 154 < L aiQ = 300 
□ 

[0280] The second method uses a simulation procedure to determine the worst-case re- 
sponse time of each A-s-k process. The simulation procedure used here is also very similar to 
the simulation procedure described in Step 3 for determining the worst-case response time of 
an A-h-k-a process, except that, (a) because all A-h-k-a processes have higher priority than 
any A-s-k process au they are all assumed to arrive at the same time as a u together with all 
A-s-k processes that have shorter deadlines compared with a,-; (b) because an A-s-k process 
cannot exclude a P-h-k, P-s-k or A-h-k-a process, there is no need for an A-s-k process to 
avoid blocking a P-h-k, P-s-k or A-h-k-a process such as in Case 1 and Case 5 of the A-h-k-a 
Scheduler; consequently there is no need for a rule in the simulation procedure for A-s-k 
processes that is similar to the rule (5) in the simulation procedure in Step 3. Because the 
rest of the simulation procedure in Step 3 is basically the same as the simulation procedure 
used here, to avoid repetition, the complete definition of the simulation procedure used here 
is given later in this specification. 

[0281] Similar to the case in Step 3, compared with the formula, the simulation procedure 
gives tighter response times that can guarantee the schedulability of a larger number of cases, 
but requires a longer computation time. 
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[0282] The simulation procedure used here also uses the functions of the A-h-k-a Sched- 
uler and the Main Run-Time Scheduler, which are described later. 

Example 10. 

[0283] This example is a description of the use of this simulation procedure. Assume that 
the second method, that is, the simulation procedure described later, is used to calculate the 
worst-case response time of the A-s-k process a\o in Example 9 above, the procedure will 
find the following. 

[0284] The maximum value of RE(a\Q,t s ) will happen when a\o arrives at time t s = 196. 
Figure 5 is an illustration of this case, showing a run-time execution of the A-s-k process 
aio, together with the A-h-k-a processes oo, «i, #9, and the P-h-k and P-s-k processes in 
Figure 3. The simulation procedure will simulate this execution in which aio's worst-case 
response time RE ai0 = max{RE(aio,f 5 )} = RE(ai 0 ,196) = ef(ai 0 ) - R ai0 = 298 - 196 = 102 as 
determined in [Example 10,] Step 5. 

[0285] At time 196, the simulation procedure assumes that oq, a\, a2, a? will arrive at the 
same time as aio, so ao will execute from time 196 to 198, and a\ will execute from time 
198 to 200. newpi will execute from time 200 to 210. a,2 will execute from time 210 to 220. 
P8,/?5,P4 will execute from time 220 to time 278. ag will execute from time 278 to 288. 
a\o will execute from time 288 to 298. Thus aio's worst-case response time will be RE aiQ = 
max{J?E(aio,r,)} = RE (aw, 196) = ef(a^)-R aiQ = 298 - 196 = 102 < L ai0 = 300. 
□ 
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[Run-Time Phase] Run-Time Phase 



[0286] During run-time, the processor capacity that is left unused by guaranteed periodic 
processes (the set of P-h-k and P-s-k processes P-g) in the pre-run-time schedule generated 
in Step 4 will be used to schedule the processes that are asynchronous and for which the 
characteristics are either known before run-time (A-s-k and A-h-k-a processes) or unknown 
before run-time but known as soon as the process arrives in the system (A-s-u processes). 

[0287] In the previous step, a time slot in the feasible pre-run-time schedule was reserved 
for each guaranteed periodic process. However, at run-time each periodic process may not 
necessarily execute within its time slot in a pre-run-time schedule, because provided that it 
can be guaranteed that all the constraints will be satisfied, it is preferred that each process 
should execute as early as possible at run-time, in order to minimize the worst-case response 
times. Nevertheless, the beginning and end times of the time slots are important parameters 
that will be used by the run-time scheduler to determine, at each point in time, whether each 
asynchronous or periodic process can be safely put into execution while guaranteeing that all 
the constraints will be satisfied. In particular, the run-time scheduler will always guarantee 
that, 

(1) the actual execution order of each pair of "guaranteed" periodic processes p\ and p2 will 
be the same as the relative ordering of their time slots in the pre-run-time schedule, that is, if 
e(p\) < s(p 2 ), then e ! {p\) < s\p 2 )\ and 

(2) the actual completion time e'(p) of each "guaranteed" periodic process p will never ex- 
ceed the end of p's time slot e{p) in the pre-run-time schedule. 

Scheduling A-h-k-a Processes 

[0288] Each time the Run-Time Scheduler is executed, it will first try to schedule A-h-k-a 
processes according to the procedure below. 

[0289] For any A-h-k-a process a x and any P-g process p u the following should hold: 
[a/ should not be able to be preempted by /?/] "a, cannot Jbe-preempted-by pi if the follow- 
ing conditions hold: 
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{ai excludes p{) V (3aj,aj e A-h-k-a: L a . < L pi Aa- t excludes aj) 

[Simplified] A-h-k-a Scheduler Method 

[0290] The A-h-k-a Scheduler Method functions as part of the Main-Run-Time Scheduler 
to be described below. 

[ A-h-k-a-Scheduler; ] 
At any time t: 

if some A-h-k-a process a; has arrived at time f , 

or if some process x; completes its computation at time t 

or if t is both the release time and start time in the pre-run-time schedule 

for some P-g process p, i.e., t = R p = s(p) 

then 

begin 

for each A-h-k-a process a t that has already arrived and not yet completed, 
i.e., R'(ai) < t A ->(e'(<Z/) < t) 9 if a x satisfies any of the following conditions, 
then Delay a,: 

Case 1: 

if 3/?, pe P-g: 

s \p) >t A (ai cannot Jbe -preempt edJ>y p) AL a . > L p 
KfiPhPl e P-g: s( Pl ) < s(p) < e(p) < e(pi) AL pi < L ai ) 

HflPiiPl € P-g-' s(p) < s(pi) < e{pi) < e(p) A (a/ cannot Jbe. preempted. by pf)) 
A {fiPm,Pm e P-g: t < s f (p m ) A e(p m ) < s{p) A L ai < L Pm ) 

A (e(p) -t)< C ai + 2 pieP - g A t<s( Pl )<e(p) A ->{J{pi)<t) A L Pl <L a . Cpi + 

la k eA-h-k-a A L ak <L p A (-^(0<R'(a k )) V A- («*)</)) V {R' {a k )+min ak <e{p))) \^^\ ' <^a k 

then Delay a,-; 

[In] { — in Case 1: a\ is delayed either if there exists the possibility that the immediate 
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execution of a,- may cause a P-g process p with less latitude to be delayed ([as] an example is 
shown in Figure 20A); or, if there exists the possibility that it may cause some A-h-k-a pro- 
cess aj to be blocked for the duration of two processes a; and p which both have greater 
latitude compared with a/s latitude[ (as] . An example is shown in Figure 20B[)]. } 

Case 2: 

[As shown in Figure 20C,] 

if 3jc, x G P-g V x G A-h-k-a: 

s f (x) < t A ~^(e f (x) < t) A x excludes ai 

then Delay a t \ 

[In] { — in Case 2: a; is delayed because it is not allowed to preempt any process x that 
excludes a;. An example of this case is shown in Figure 20C.} 

Case 3: 

[As shown in Figure 20D,] 
if Ek, x G P-g V x G A-h-k-a: 
s'(x) < t A ^(e'(x) <t) A L x < L ai 
then Delay a t \ 

[In] { — in Case 3: a, is delayed because it is not allowed to preempt any process x that has 
less or the same latitude as a/. An example of this case is shown in Figure 20D.} 

Case 4: 

[As shown in Figure 20E,] 

if 3ay 5 /7,a 7 - G A-h-k-a, p G P-g: 

s\p) > t A s f (aj) < t A ^{e'(aj) < t) 

A aj excludes p A L p < L ai 

then Delay a, 

[In] { — in Case 4: a\ is delayed because it is not allowed to preempt any A-h-k-a process 
a } which excludes a P-g process p with less or equal latitude compared with a/'s latitude. 
An example of this case is shown in Figure 20E.} 
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Case 5: 

[As shown in Figure 20F,] 
if 3p,p u p,p x € P-g: 

s'(p) > t As(p) < s(p\) < e(p\) < e(p) A (a,- cannot Jbe .preempted -by p\) AL ai > L p 
A {flpmiPm e P-g: t < J{p m ) A e(p m ) < s(p) A L ai < L Pm ) 

A ( S (P) — 0 < c at+ Yj Pl eP-g A ^{e'{pi)<t) A t<s(pi)<e(pi)<s{p) c pi 

+ y Za k eA-h-k-a A L ajc <L p A (-(0</?'(^)) V (R'(a k )<tA^{e f (a k )<t)) V (i«'(at)+min flJk <s(rt)) ^5^1 ' c ajk 

then Delay a x \ 

[In] { — in Case 5: a; is delayed if there exists the possibility that the immediate exe- 
cution of at may cause a P-g process p with less or equal latitude to be delayed, when p 
may be preempted by some other periodic process p\, and a,- cannot be preempted by p\. 
An example of this case is shown in Figure 20F.} 

Case 6: 

[As shown in Figure 20G,] 

if 3x,a/,x GA-h-k-a Vjc eP-g, 

aj e A-h-k-a: 

s f (x) < t A ^(e f (x) < t) 

A x excludes aj 

A L a j < L x A Laj < L ai 

then Delay a,. 

[In] { — in Case 6: a/ is delayed because it is not allowed to preempt any process x that 
excludes some other A-h-k-a process aj which has a latitude that is less than both x and a/s 
latitude, because that may cause a } to be blocked by the duration of more than one process 
with greater latitude. An example of this case is shown in Figure 20G.} 

Case 7: 

[As shown in Figure 20H,] 
if3p,peP-g: 

R p <t A -(<?'(/?) < t) A L p < L ai 

/\-i(s ( {ai) <t A (at cannot Jbe. preempted Jby p)) 
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A p PhPi G P-g: s(j>i) < s(p) A ^(e'(pi) < t) 
A-«(j(p,0 < s(p) A e(p) < e(pi)) 
then Delay a t \ 

[In] { — in Case 7: a/ is delayed so that it can be preempted by a P-g process p that has 
a latitude that is less than or equal to a/'s latitude, when a,* does not exclude p and does not 
exclude any A-h-k-a process with a latitude that is shorter than p's latitude, and there does not 
exist any P-g process />/ that has not completed such that p t is ordered before p and p does not 
preempt pi in the pre-run-time schedule. An example of this case is shown in Figure 20H.} 
end{if} 

Select, among all processes a x 6 A-h-k-a, such that a x has already arrived and not yet com- 
pleted, and a\ is NOT Delayed, the process which has the shortest deadline. If more than one 
process is thus selected, select among them the process that has the smallest index, 
end; 

return to Main Run-Time Scheduler; 

[0291] The A-h-k-a Scheduler has the following properties: 

[0292] Property 1. Each P-g process p's execution can only be delayed by A-h-k-a pro- 
cesses that have less latitude than p's latitude. A P-g process will never be delayed by any 
A-h-k-a process that has a greater or equal latitude. 

[0293] Property 2. Any A-h-k-a process a,* cannot be blocked by more than one critical 
section belonging to A-h-k-a processes that have deadlines greater than a f 's deadline. 

[0294] Property 3. No deadlocks can ever occur. 

[0295] Property 4. Each P-g process p will always be completed on or before e(p), that 
is, the end of the time slot allocated to p in the pre-run-time schedule. 

Example 11. 
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[0296] Continuing with the set of processes in Examples 1-10 above, suppose that A-h- 
k-a process ai makes a request at time 99. Figure 6 is an illustration of this case, [which 
is] showing a possible run-time execution of the A-h-k-a processes oq, a\, ag, scheduled 
by the A-h-k-a Scheduler Subroutine together with the P-h-k and P-s-k [methods] processes 
described [with regard to Example 11, and] in Figure 3, during the run-time phase. 

[0297] Because s(newp3 { ) = 100 > t = 99 A a 2 excludes newp 3 A L Q2 = d ai = 239 > 

Lnewps = dnewps " ^newp 3 = 1 15 - 100 = 15 A e(pyj - 1 = 1 14 - 99 = 1 5 < C ai + C p3 + C aQ + C ai = 

10 + 10 + 2 + 2 = 24, the conditions in Case 1 of the A-h-k-a Scheduler Subroutine are true, 
so a 2 is delayed. 

(If a 2 is allowed to start at time 99, then newp$ would miss its deadline. This is because a 2 
excludes newpi, once it starts, it cannot be preempted by newpi, thus its execution will oc- 
cupy a portion of the time frame reserved by newp$ in the pre-run-time schedule which only 
includes reserved processor capacity for itself and A-h-k-a processes with shorter deadlines, 
which are ao and a\ .) 

[0298] Suppose that both ao and a\ make requests at time 130, then oq will execute from 
time 130 to 132, and a\ will execute from time 132 to 134, both using processor capacity that 
was reserved for them in p£$ reserved time frame. 

[0299] <Z2 will be executed after newp^, p 6 , p 7 , as it's latitude L a2 = d a2 = 239 is greater 
than the latitudes of newpi, p$, p-j. 
□ 

[0300] Note that an A-h-k-a process at may be blocked from the start time to the end time 
of some critical section of a P-g process in the pre-run-time schedule. 

[0301] One can easily determine the maximum time that any A-h-k-a process can be de- 
layed by any P-g process with a simple inspection of the pre-run-time schedule. One can also 
easily make changes to a pre-run-time schedule in order to avoid any excessive delay of an 
A-h-k-a process a/ that may be caused by preemptions of a P-g process's critical section by 
other P-g processes. 
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[0302] Above, a P-g process p\ has been allowed to be preempted by some other P-g pro- 
cess p2, even if this may cause some A-h-k-a process a to be blocked by the duration of two 
critical sections belonging to two P-g processes p\ and p2 which both have latitudes that are 
greater than a's latitude. This provides greater flexibility to the scheduling of P-g processes. 

[0303] However, it is easy to guarantee that any A-h-k-a process a cannot be blocked by 
the duration of two critical sections belonging to two P-g processes p\ and p2 which both 
have latitudes that are greater than a's latitude. To guarantee this, all one needs to do is the 
following, for all pairs of P-g processes p\ and /?2, if p\ excludes some A-h-k-a process a, 
and L P2 > L a , then add the exclusion relation p\ excludes /?2- 

[0304] If the potential run-time overhead of the A-h-k-a Scheduler in the integration ap- 
proach is compared with the overhead of methodss that schedule all the tasks at run-time, the 
following may be noticed: 

(a) With the integration approach, the number of processes that the A-h-k-a Scheduler needs 
to handle, should be very small. This is because, in most real-time systems, the bulk of 
the computation is performed by periodic processes, while the number of asynchronous pro- 
cesses with hard deadlines is usually very small. In addition a significant portion of the asyn- 
chronous processes will be transformed into periodic processes when using this approach. 

(b) The interarrival times of A-h-k-a processes that are not converted into new P-h-k pro- 
cesses are likely to be long. 

(c) A significant portion of the parameters used by the A-h-k-a Scheduler to make scheduling 
decisions, are known before run-time, so one can pre-compute major portions of the condi- 
tions that are used for decision making, hence the amount of computation that needs to be 
performed for scheduling purposes at run-time can be minimized. 

Thus the run-time overhead of the A-h-k-a Scheduler is believed to be by far smaller than the 
overhead of methods that schedule all the tasks at run-time. 
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[The Main Run-Time Scheduler] The Main Run-Time Scheduler 



[0305] At run-time, the order of the execution of any pair of guaranteed periodic pro- 
cesses, i.e., P-h-k or P-s-k processes is kept consistent with the order of that pair of processes 
in the pre-run-time schedule. 

[0306] A-s-u processes are scheduled at a lower priority than the A-h-k-a, P-h-k, P-s-k, 
and A-s-k processes. That is, A-s-u processes are executed only when there does not exist 
any process with known characteristics, i.e., A-h-k-a, P-h-k, P-s-k, or A-s-k process, that is 
ready for execution. If more than one A-s-u process are competing for execution, the process 
with the shortest deadline will be chosen for execution. An A-s-u process is not allowed to 
have any precedence relation with any other process. An A-s-u process a,- is not allowed to 
have any exclusion relation of the form a- t excludes x where x is an A-h-k-a, P-h-k, P-s-k 
or A-s-k process. These restrictions are imposed in order to prevent A-s-u processes from 
causing any delay to processes with known characteristics; so that one can guarantee that all 
the hard deadlines will be satisfied, and also provide firm response time guarantees for all the 
processes with known characteristics. 

[0307] For any P-g process p x and any P-g process pz, if s(p{) < s(p 2 ) < e(p 2 ) < e(p\), 
then p2S time slot [be] is nested within p\ 's time slot in the pre-run-time schedule. 

[0308] Main-Run-Time-Scheduler Method: 
At any time t\ 

if some process x has arrived at time f , or has completed at time f , 

or iff is both the release time and start time in the pre-run-time schedule 

for some P-g process /?, i.e., t — R p = s(p) 

then execute the Main-Run-Time-Scheduler as follows: 

execute the A-h-k-a-Scheduler-Subroutine; 

{the A-h-k-a Scheduler-Subroutine was 
defined earlier} 
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if some A-h-k-a process a; is selected for execution at time t by the A-h-k-a Scheduler 

then execute a; 

else 

begin 

if 3p,p G P-g: s'(p) < t A-(e'(p) < 0 

A $p hPi G P-g: R pi <tA^(e f ( Pi ) < t)As(p) < s( Pi ) Ae( Pi ) < e(p) 
{there exists p that has started and has not completed, and there does 
not exist any other p t that is ready and has not completed, such that 
Pi's time slot is nested within p's time slot in the pre-run-time schedule} 
then continue to execute p. 

else 

if 3p,pG P-g: R p <t/\^{e\p) <t) 

A p PhPi G P-g: -y{J{pi) < t)As( Pi ) < s(p)A^(s( Pi ) < s(p) Ae( P ) < e{ Pi )) 
A fo hPi G P-g: R Pj <tA^(e'( Pj ) < t)As( P ) < s( Pj ) Ae( Pj ) < e( P ) 
{there exists p that is ready and has not completed, and there does 
not exist any other pi that has not yet completed, such that pi is ordered 
before p in the pre-run-time schedule, and p's time slot is not nested within 
Pi's time slot in the pre-run-time schedule, and there does not exist any 
other pj that is ready and has not completed, such that p/s time slot 
is nested within p's time slot in the pre-run-time schedule} 
then execute p 

else 

if 3fl/ 3 flj G A-s-k: R a . < t A ^(e f (ai) < t) 

A fix : (s*(x) < t A -*(e'(x) < t) A {{x excludes a/) 

V (3aj,dj G A-s-k: ^(x) < t A ^(e f {x) < t) A x excludes aj A L aj < L x 
AL aj <L ai )) 

{there exists A-s-k process a x that is ready and has not completed, and 

there does not exist any other process x such that x excludes a t or x excludes 

some process aj such that aj has a latitude that is less than both ;t's 

and flt/'s latitude, and x has started but not completed} 

then select among them, a process a t that has the shortest deadline; 
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if among such processes there are some that have already started, then choose 
a process that has already started; and execute a,-; 

else 

if 3a/, a/ G A-s-u: R Ui < t A < t) 

A fix : (/(x) < t A -»(e ; (jt) < 0 A ((jc excludes ai) 
V (3a/, a/ e A-s-u: s'(;c) < f A ^(e'(jc) < f) A x excludes aj A L aj < L x 
AL aj <L ai )) 

{there exists A-s-u process a\ that is ready and has not completed, and 

there does not exist any other process jc such that x excludes a,* or x excludes 

some process aj such that aj has a latitude that is less than both x's 

and a;'s latitude, and x has started but not completed} 

then select among them, a process a x that has the shortest deadline; 

if among such processes there are some that have already started, then choose 

a process that has already started; and execute a/; 

end; 

Example 12. 

[0309] Continuing with the set of processes in Examples 1-11 above, assume the fol- 
lowing asynchronous process a\\ with a soft deadline and unknown characteristics (A-s-u 
process), (an's characteristics are only known after its arrival.) 

a\\\ c au = I0,d au =300. 

[0310] Assume also that A-s-u process a\ \ makes a request at time 190; A-h-k-a process 
a2 makes a request at time 191; A-s-k process a\Q makes a request at time 196; and A-h-k-a 
processes ao and a\ make requests at time 200 Figure 7 illustrates an [exemple] example of 
this case, in particular a possible run-time execution of the A-s-u process a\\, and the A-s-k 
process aio, scheduled by the Main Run-Time Scheduler together with the A-h-k-a processes 
<zo> au #2> and the P-h-k and P-s-k processes described with regard to Figure 3, [in Example 
12,] during the run-time phase. 



[0311] At time 190 a u will be put into execution as there are no other processes that 
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are ready for execution. At time 191 a 2 will be delayed because the conditions of Case 1 
of the A-h-k-a Scheduler will be true. Note that a 2 excludes newp?>, and L newp3 < L ai \ if a 2 
is allowed to execute at time 191, it will cause newpi to miss its deadline if ao and a\ also 
preempt newpi. At time 196 a\o will preempt a\\ as A-s-k processes are scheduled before 
A-s-u processes. At time 200 oq will preempt aio as A-h-k-a processes are scheduled before 
A-s-k processes. a n will execute from time 190 to 196; a\o will execute from time 196 to 
200; ao will execute from time 200 to 202; a\ will execute from time 202 to 204; newpi will 
execute from time 204 to 214. As L p% < L a2 , L Ps < L a2 , and L P4 < L a2 ; ps will preempt a 2 at 
time 220; p$, p 5 , p 4 will execute from time 220 to 278; a 2 will resume execution from time 
278 to 282; aio will resume execution from time 282 to 288; an will resume execution from 
time 288 to 292. 
□ 

[0312] Note that each process may be completed earlier than the time indicated in the 
pre-run-time schedule, since the time that is reserved for each asynchronous process with a 
shorter deadline in a guaranteed periodic process's time frame in the pre-run-time schedule 
will not be used by that asynchronous process if it does not arrive during that time frame. 

Example 13. 

[0313] In Example 3, when using the procedure for converting a set of asynchronous 
processes into a set of new periodic processes, threshold{ai) was set to 2.5, resulting in the 
A-h-k process being converted into a new periodic process newp$. 

[0314] Now assume that threshold{ai) is set to an arbitrary large value, say 50, that would 
guarantee that a-$ will not be converted into a periodic process. 

[0315] In the case that A-h-k process a$ remains asynchronous, because the latitude of 
<33> L a3 = d a3 = 114, as well as the latitudes of ao and a\ are greater than the latitudes of 
the periodic processes p^pt,pi in meeting their respective deadlines, the worst-case com- 
putation times of p^p^pi should be adjusted to leave "room" for ao, a\ and a^s worst-case 
computation time as follows: 

C p 4 = C P4 C a 0 + c a { + C a3 = 26 + 2 + 2 + 10 = 40 
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C P6 = c P6 c ao + c "\ + c «3 = 26 + 2 + 2+10 = 40 
d pi =c P7 c ao + c ai +c a3 = 16 + 2 + 2+10 = 30 

The pre-run-time scheduler will first construct the feasible pre-run-time schedule illustrated 
in Figure 8 for the set of P-g processes P4iP5iP6,Pi- Then the simulation procedure for de- 
termining the worst-case response time of an A-h-k-a process can be used to determine oq, a\ , 
<Z3> #9's worst-case response time. A-h-k-a process <23's worst-case response time happens 
when arrives at time 7, while #2 which excludes a$ arrived one time unit before a-$ at time 
6. If ao, a\ which have less latitude than in meeting their respective deadlines, arrive at the 
same time 6, ao will preempt ai and execute from time 7 to time 9, a\ will execute from time 
9 to time 1 1, a2 will continue its execution from time 1 1 to time 20, p% will first execute from 
time 20 to time 30; at time 30 p$ will be preempted by p$ which executes from time 30 to time 
46; at time 46 p% will continue its execution from time 46 to time 52. At time 52, because 
La 3 = d <*i ~ 1 14 < l pa = d P4 - r P4 = 200 " 0 - 200 > a 3 will execute from time 52 to time 62. A- 
h-k-a process a 3 's worst-case response time RE a3 = {REfats)} = RE{a^,l) = e'(a 3 ) -7?^ 
= 62 - 7 = 45 < d a2 = 1 14. Similarly, one can verify that the worst-case response times of all 
the other asynchronous processes are all less than or equal to their respective deadlines, as 
shown in Figure 8. 
□ 

[0316] The embodiments described herein are advantageous methods of the integration 
approach compared with methods that perform all scheduling activities at run-time. It should 
be noted that existing methods or protocols that perform all scheduling activities at run-time 
are not able to guarantee the schedul ability of the set of processes given in these examples. 
There are many reasons for this, including: 

[0317] 1 . Prior art run-time scheduling methods are not capable of finding optimal sched- 
ules involving critical sections, except for the simplest problem instances, because not enough 
time is available to the scheduler at run-time. 

[0318] 2. Prior art run-time scheduling methods cannot handle precedence constraints, 
release time and exclusion constraints simultaneously in an efficient way. 
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[0319] 3. [Current] Prior art run-time scheduling methods are unable to take full advan- 
tage of the knowledge about processes characteristics that is available before run-time. For 
example, no prior art run-time scheduling method can completely avoid blocking of a pe- 
riodic process with less latitude by a asynchronous process with greater latitude, which the 
integration approach is capable of doing, as shown in the examples above. As another exam- 
ple, when determining the worst-case response times of asynchronous processes, no prior art 
run-time scheduling method can completely avoid making the overly pessimistic assumption 
that, for each process, all the periodic processes with shorter deadlines can arrive at the same 
time to delay that process. In contrast, the integration method in accordance with the present 
invention can avoid making such an overly pessimistic assumption, as shown in the examples 
where a simulation procedure can obtain tighter worst-case response times for asynchronous 
processes, by taking advantage of the knowledge of the positions of the periodic processes in 
the pre-run-time schedule. 

[0320] If the potential run-time overhead of the Main Run-Time Scheduler in the inte- 
gration method is compared with with the overhead of methods that schedule all the tasks at 
run-time, the following will be noticed: 

(a) The Main Run-Time Scheduler is much simpler, and the amount of computation needed 
for scheduling purposes is much smaller, compared with most methods that schedule all the 
tasks at run-time. This is because most of the important scheduling decisions have already 
been made before run-time. In particular, the relative ordering of P-h-k and P-s-k processes 
that usually form the bulk of the computation in most real-time applications, was determined 
before run-time when the pre-run-time schedule was computed. 

(b) Since at run-time, the execution order of P-h-k and P-s-k processes is the same as the 
relative ordering of those processes in the pre-run-time schedule, one would know exactly 
which guaranteed periodic process may preempt which other guaranteed periodic process at 
run-time. Thus one can use this information to minimize the amount of context switching. 
Thus it is believed that the run-time overhead of the Main Run-Time Scheduler should be by 
far smaller than the overhead of methods that schedule all the tasks at run-time. 
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Using the Present Invention With Multiple Processors 

[0321] The methods described above can be used for scheduling processes with exclusion 
relations, precedence relations, and offset constraints, release time, worst-case computation 
time, deadline constraints, on more than one processor. 

[0322] There are many possible ways that would allow one to use the methods with more 
than one processor. The following is just one possible set of changes to the procedures de- 
scribed earlier that would allow one to use the methods for scheduling processes on more than 
one processor. The use of the methods with multiple processors is illustrated in Example 14. 

[0323] As stated earlier, instead of using a single processor method such as the method in 
[[XuPa90]] the aforenoted 1990 article by Xu and Parnas in the procedure for constructing a 
feasible pre-run-time schedule for a given set of periodic processes with offsets, one should 
use a multiple processor scheduling method, such as the method in [[Xu93]] the aforenoted 
1993 article by Xu in that procedure. 

[0324] One simple strategy, that will be used in the embodiment described below, is to set 
the release time r Pi of every periodic process p t to be equal to the beginning time of its time 
slot in the pre-run-time schedule, i.e., r Pi = s{pi). This ensures that every periodic process' 
actual execution will not start earlier than the beginning time of its time slot, i.e., r Pi < s\pi). 
This could prevent multiple processor anomalies that could be caused by the following situ- 
ation. Some processes end earlier, and a first process that excludes a second process with a 
relatively short deadline is executed earlier, resulting in the first process' execution combin- 
ing with the execution of a third process on another processor that also excludes the second 
process to increase the time interval in which the second process is blocked from execution. 
It is not difficult to design alternative methods that would allow each periodic process to 
start execution at a time earlier than the beginning of its time slot, while preventing such 
anomalies. Likewise, in the design of the Multiple Processor A-h-k-a Scheduler described 
below, there are many possible alternative strategies that would allow some more flexibility 
in scheduling the processes, however, this disclosure would be of too great length if every 
possible improvement is described. 
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[0325] The Multiple Processor A-h-k-a Scheduler and Multiple Processor Main-Run- 
Time Scheduler can be designed as follows. 

[0326] Each time the Multiple Processor Run-Time Scheduler is executed, it will first try 
to schedule A-h-k-a processes according to the procedure below. 

[0327] For any A-h-k-a process <z; and any P-g process p/, it will be said that 
"a, cannot be preempted by p{\ if the following conditions should hold: 
(a,- excludes p t ) V (3a/, a/ G A-h-k-a: L aj < L Pi A at excludes aj) 

[0328] For any pair of P-g processes p\ and p2, it will be said that 
"the time slot of p\ overlaps with the time slot of pi\ if the following conditions should hold: 
(s(P\) < s(p2) < e(pi)) V (s(p2) < s(pi) < efa)) 

[0329] The Multiple Processor A-h-k-a Scheduler Method functions as part of the Multi- 
ple Processor Main-Run-Time Scheduler to be described below. 

[0330] Multiple Processor A-h-k-a-Scheduler Method: 

At any time t: 

if some A-h-k-a process a; has arrived at time f , 

or if some process xi completes its computation at time t 

or if r is both the release time and start time in the pre-run-time schedule 

for some P-g process p, i.e., t — R p = s(p) 

then 

for every processor k: 
begin 

for each A-h-k-a process a/ that has already arrived and not yet completed, 
i.e., R f (ai) < t A ^(ai) < t), check if a t 
satisfies the following conditions, 

Case 1: if on any processor fc, 
3/>,p€P-g: 
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^(p) >t A {fli cannot Jbe -preempt edJby p) AL Qi > L p 

A (PpmiPm € P-g: t < s f (p m ) A e(p m ) < s(p) A L fl . < L Pm A{fip x € P-g: 

p\ excludes a/A 's time slot overlaps with p m 's time slot)) 
A (there does not exists any interval [t^] on processor k 7 such that: 

t<t 2 < s(p) 

A(^p/,p/ GP-g: any portion of /?/'s time slot is mapped to any portion of the 
interval [t,tq\ on the time axis corresponding to processor k in the 
pre-run-time schedule) 

A(flpj,p m GP-g: pj excludes a/ A (p/s time slot overlaps with [M2])) 

A(t 2 -t)>c ai + 

2a k eA-h-k-a A U k <L p A (-(0</?'(^)) V (^(fl*)<f Ai^^)^)) V (^(^)+m/n^<5(p))) ' ^ 

then Delay a,-; 

In Case 1: a/ is delayed either if there exists the possibility that the immediate execution 
of a t may cause a P-g process p with less latitude to be delayed (as shown in Figure 20 A); 
or, if there exists the possibility that it may cause some A-h-k-a process a } to be blocked for 
the duration of two processes a\ and p which both have greater latitude compared with a/s 
latitude (as shown in Figure 20B). 

Case 2: if on any processor k, 

3x,x G P-g V x GA-h-k-a: 

s f (x) < t A -«(<?' (x) < t) A x excludes a t 

then Delay a,-; 

In Case 2: a/ is delayed because it is not allowed to start its execution if there exists any 
process x that excludes a\ that has started but not yet completed (as shown in Figure 20C). 

Case 3: if on processor k 

3jc,jc G P-g V x GA-h-k-a: 

s\x) < t A -i{e f (x) < t) A L x < L a . 

then a { is ineligible to execute at time t on processor k\ 

In Case 3: a t is ineligible to execute at time t on processor k because it is not allowed to 
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preempt any process x that has less or the same latitude as a,- (as shown in Figure 20D). 

Case 4: if on processor k, 
3aj y p,aj G A-h-k-a, p G P-g: 
s f (p) > t A s f (aj) < t A ^{e l {aj) < t) 
A aj excludes p A L p < L ai 

then a, is ineligible to execute at time t on processor k 

In Case 4: a/ is is ineligible to execute at time t on processor k because it is not allowed 
to preempt any A-h-k-a process aj which excludes a P-g process p with less or equal latitude 
compared with a,'s latitude, (as shown in Figure 20E) 

Case 5: on processor k, 

if 3jc, a^x G A-h-k-a \lx GP-g, 

aj G A-h-k-a: 

s'(x) < t A ^{e\x) < t) 

A x excludes aj 

A La j < L x A Laj < L Qi 

then at is ineligible to execute at time t on processor k. 

In Case 5: a, is ineligible to execute at time t on processor k because it is not allowed to 
preempt any process x that excludes some other A-h-k-a process aj which has a latitude that 
is less than both x and a,'s latitude, because that may cause aj to be blocked by the duration 
of more than one process with greater latitude (as shown in Figure 20G). 

Case 6: if on processor k 

R p <t A ^(e f (p) < t) A L p < L ai 
A^(s f (ai) < t A {at cannot J?e .preempted .by p)) 
A jBp h pi G P-g: s(pi) < s(p) A -(<?'(/>;) < t) 
A^(s( Pi ) < s(p) A e(p) < e{ Pi )) 
then a; is ineligible to execute at time t on processor k\ 
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In Case 6: a\ is ineligible to execute at time t on processor k so that it can be preempted by 
a P-g process p that has a latitude that is less than or equal to a,'s latitude, when a,- does not 
exclude p and does not exclude any A-h-k-a process with a latitude that is shorter than p's 
latitude (as shown in Figure 20H). 
end; 

For each processor k, select, among all processes a,* e A-h-k-a, such that a x has already arrived 
and not yet completed, and a; is NOT Delayed, and a t is NOT ineligible to execute at time 
t on processor k, the process which has the shortest deadline and execute that process on 
processor k. If more than one process is thus selected, select among them the process that has 
the smallest index, 
end; 

return to Multiple Processor Main Run-Time Scheduler; 



[0331] Multiple Processor Main-Run-Time-Scheduler Method: 
At any timer: 

if some process x has arrived at time r, or has completed at time t, 

or if t is both the release time and start time in the pre-run-time schedule 

for some P-g process p, i.e., t = R p = s(p) 

then execute the Multiple Processor Main-Run-Time-Scheduler as follows: 

execute the Multiple Processor A-h-k-a-Scheduler; 

For each processor k, if some A-h-k-a process a t was selected for 
execution at time t on processor k by the A-h-k-a Scheduler 
then execute a; 
else begin 

if on processor k, 

^P,P € P-g: s'(p) < tA-*(ef(p) < t) 
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(there exists p that has started and has not completed) 
then continue to execute p. 

else 

if on processor k, 

^P,P e P-g: R p <tA^(e f (p) < t) 

(there exists p that is ready and has not completed) 
then execute p 

else 

if 3a/, a/ G A-s-k: R ai < t A -»(£?' (a,-) < t) 

A fix : (s f {x) < t A ->(e'(x) < t) A ((jc excludes a/) 
V (3ay,a; G A-s-k: s'(x) < f A < f) A jc excludes aj 

AL aj <L x f\L aj <L ai )) 

(there exists A-s-k process a/ that is ready and has not completed, and 
there does not exist any other process x such that x excludes a/ or x ex- 
cludes some process a, such that a y * has a latitude that is less than both 
x's and a,'s latitude, and x has started but not completed) then select 
among them, a process a/ that has the shortest deadline; if among such 
processes there are some that have already started, then choose a pro- 
cess that has already started; and execute a/;) 

else 



if 3a/, ai G A-s-u: R a . < t A -^(e'(a/) < t) 

A fix : (s'(x) < t A -V(jc) < t) A ((jc excludes ai) 
V (3a y -,a 7 - G A-s-u: < f A -i(e'(jc) < r) A x excludes aj 
A L a . < L x AL aj <L ai )) 

(there exists A-s-u process a/ that is ready and has not completed, and 
there does not exist any other process x such that x excludes a/ or x ex- 
cludes some process a y - such that ay has a latitude that is less than both 
x's and a/'s latitude, and jc has started but not completed) 
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then select among them, a process a t that has the shortest deadline; 
if among such processes there are some that have already started, then 
choose a process that has already started; and execute a,-; 
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[0332] The multiple processor simulation method for determining the worst-case response 
time of A-h-k-a processes can be designed as follows: 

[0333] Multiple processor method for computing the worst-case response time of an A- 
h-k-a process a; corresponding to a feasible pre-run-time schedule of guaranteed periodic 
processes consisting of an initial part of the pre-run-time schedule So(*o), in the interval [0, 
to]\ and a repeating part of the pre-run-time schedule S^cw (p^LCAf)» in the interval [ro,^o + 

fail:= false; 

for t s := 0 to to + prducM - 1 do 
begin 

For each A-h-k-a process a b , such that a b G A-h-k-a A L ab > L ai A3jc*, jc* G A-h-k-a 
Vxk G P-g: a b excludes X& A L Xk < L ai , do the following: 

let a b arrive at time t s - 1, and use the Multiple Processor A-h-k-a Scheduler 
and Multiple Processor Main Run-Time Scheduler to schedule a b and a t to ob- 
tain a response time of a u called RE\(ai,t s ,a b ), corresponding to each a b ac- 
cording to the assumptions (l)-(6) below, with the additional assumption that 
at can always start its execution at time t s - 1 (including when t s = 0) except 
if at time t s — 1 there exists some periodic process /?, such that t s < s(p) and 
(a b cannot Jbe .preempt edJby p) AL ab > L p , and executing a b at time t s - 1 may 
cause p to miss its deadline, that is, a b is delayed by the conditions in Case 1 of 
the Multiple Processor A-h-k-a Scheduler. At time t = t s - 1, assume that the con- 
dition V(p) > f" is true for every periodic process p such that t s < s(p) when 
checking whether a b should be delayed by the conditions of Case 1 of the Multi- 
ple Processor A-h-k-a Scheduler. When computing RE\(ai,t 5y a b ), if 3/7/,/?/ G P-g 
hs(pi) <t s <e(pi), then assume that pi has already completed at time t s - 1, that 
is, this instance of pi will not have any effect on a by a,-, or any other process in the 
system. 
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(Let each A-h-k-a process that can possibly block a/, arrive at time t s - 1 

and determine which one among them will block a { for the greatest amount of time.) 

After obtaining RE\{ai,t s ,ai) for every such use the Multiple Processor A-h- 
k-a Scheduler and Multiple Processor Main Run-Time Scheduler to schedule to 
obtain another response time of a/, called RE2{a^t s ), according to the assumptions 
(l)-(6) below, with the additional assumption that no A-h-k-a process such that 
at, G A-h-k-a A L ab > L ai ABx^x^ G A-h-k-a Vjc^ G P-g: at excludes x^ A L Xk < L Qi 
had ever arrived. When computing RE2{ai,t s ), if 3/?/,/?/ G P-g As(pi) <t s < e(pi) y 
then assume that s*(pi) = s(pi)Ae'{pi) = e{pi)\ {i.e., pi started at the beginning 
of its time slot and will complete its computation at the end of its time slot in the 
pre-run-time schedule that was computed using adjusted computation times. 

(1) ai arrives in the system at time t s . 

(2) Unless a, is delayed because of the conditions in Case 1 of the Multiple Pro- 
cessor A-h-k-a Scheduler, (see (3) below), let the A-h-k-a processes aj in the set 
{aj\Laj < L Qi A aj excludes ai) arrive one by one in a serial sequence such that 
each process in the set arrives exactly at the same instant that the process before it 
in the sequence has just completed, with the first process in the sequence arriving at 
the time that at has just completed if at is able to block a/, and at the earliest time r, 
t s < t that it can be executed, if a^ does not block a,-; let every other A-h-k-a process 
aj, such that L aj < L ai arrive at the time that the last process in the above serial se- 
quence has completed; or at the following instants in time: R aj (k) = t s + k*min aj: 
k — 0, 1, 2, . . . , L^-J > if no such processes in the above set exist, and be scheduled 
before a t whenever a/ and ay have both arrived and a t has not yet started. If aj is 
delayed by any of the conditions in Cases 1-6 of the Multiple Processor A-h-k-a 

Scheduler then let a/ be delayed by the same amount of time. 

For each such a/s subsequent arrival times, use the arrival times: R aj {k) =t s + 

k*min ap and whenever there is more than one such process arriving at a time that 

any such process is executing or has arrived but not completed, modify their arrival 

times as described above. 
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( All A-h-k-a processes that have shorter deadlines and that exclude ai arrive in a 
serial sequence that maximizes the time that a/ is excluded, all other A-h-k-a pro- 
cesses whose deadlines are shorter or equal to a{% deadline arrive at the end of that 
sequence if any, and are put into execution before a/. 

(3) Whenever the conditions in Case 1 of the Multiple Processor A-h-k-a Scheduler 
become true for a t and some P-h-k process p at some time t, i.e.: if on any processor 
k, 3p,/?€P-g: 

d{p) >t A (a; cannot Jbe -preempt edJby p) AL ai > L p 

A (fip m ,p m e P-g: t < s\p m ) A e(p m ) < s(p) A L a . < L Pm A(fip\ € P-g: 

p\ excludes a/A (p\ 's time slot overlaps with p m 's time slot)) 
A (there does not exists any idle interval [r,^] on some processor £, such that: 

t <t 2 < s(p) 

A(flpj,p m GP-g: pj excludes a t A (p/s time slot overlaps with [r,^])) 
A(t 2 -t)>c ai + 

%a k €A-h-k-a A L ak <L p A (-(0</? , (a Jfc )) V (^(a^^A-^^)^)) V {& (a k )+mm ak <s(p))) 

let t also be the earliest time that the conditions in Case 1 become true for that in- 
stance of p and a/, 

then for every other A-h-k-a process aj that belongs to the following set: 
{aj\aj e A-h-k-a A j^i A L aj < L ai A 

(H0<R f (aj)) V (R f (aj)<tA-,(e'(aj)<t)) V (R f (aj) +min aj < s(p))) 
V (s f (a b ) < t s A t- 1 < e\a b ) A s\aj) < t))} 

(aj has a deadline that is shorter than or equal to a/'s deadline and, either aj has 
never arrived; or aj has arrived but has not completed its computation; or aj may 
arrive again before time s(p); or at time t-\a x was blocked by a b and aj started its 
execution before t) y 
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"delay" a/s arrival time to occur at the following time: let the A-h-k-a processes aj 
in the set {aj\L aj < L ai A aj excludes a{\ arrive one by one in a serial sequence such 
that each process in the set arrives exactly at the same instant that the process before 
it in the sequence has just completed, with the first process in the sequence arriving 
at the time that p has just completed; let every other A-h-k-a process ay, such that 
L aj < L ai arrive at the time that the last process in the above serial sequence has 
completed; or at the completion time of p, e(p)\ if no such processes in the above 
set exist, and be scheduled before a; whenever a t and aj have both arrived and a, 
has not yet started. If aj is delayed by any of the conditions in Cases 1-6 of the 
Multiple Processor A-h-k-a Scheduler, then let a,- be delayed by the same amount 
of time. If at time s(p) the conditions in Case 1 of the Multiple Processor A-h-k-a 
Scheduler continue to be true for some other periodic process //, then a; should be 
delayed again, and the A-h-k processes d- that satisfy the conditions of the formula 
for p 1 should also be delayed again in similar manner. For each such a y -, let only 
a single instance of aj arrive at the above times, even if originally there could be 
several instances of a same process aj that satisfy the conditions above. 

For each such a/s subsequent arrival times after s(p), use the same arrival times 
that were determined in (2), i.e., ay's subsequent arrival times after s(p) will be: 
R aj (k)=t s + k* min a j such that R a j(k) > s(p), and whenever there is more than one 
such process arriving at a time that any such process is executing or has arrived but 
not completed, modify their arrival times as described above. 
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(If at time t there exists more than one process p for which the conditions of Case 1 
are true for p and a;, then let the above apply to the process p among them that has 
the latest s(p) time in the pre-run-time schedule.) 

( if ai is delayed due to the conditions in Case 1, then an A-h-k-a process aj could 
delay a; by a maximum amount by arriving at the above described times.) 

(4) If the end of the current instance of the repeating part of the pre-run-time sched- 
ule is reached, continue at the beginning of the next instance of the repeating part 
of the pre-run-time schedule. 

(5) If a/'s deadline d ai is reached but a x has not yet completed its computation, then 
set fail:= true and exit from the procedure. 

(6) If a/'s computation is completed before its deadline d an then record the com- 
pletion time of ^ as the response time of a v (either RE\ (a/, t s , a b ) for the current a bi 
or RE 2 {ai,t s ) when no such a b is assumed to have arrived at time t s - 1). 

After the response time RE\ (a^at) corresponding to every a b that may block a- x 
has been computed, and the response time RE2{ai,t s ) that assumed that no such 
a b had arrived and blocked a\ has also been computed, set the response time of 
a t with arrival time f 5 , RE(a h t s ) to be equal to the greatest among them, i.e., 
RE(ai,t s ) = max{RE\(ai,t S) a b ),RE2{ai ) t s )}, and exit from the current iteration of 
the loop for this value of t s , and start the next iteration for t s :~ t s + 1. 

end; 

if not fail then 

RE ai := max{RE(a h t s ) \ t 5 = 0, 1, ...,LCM- 1}; 
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[0334] Assuming that the same adjusted-capacity function is used for adjusting the com- 
putation times of periodic processes, the Multiple Processor A-h-k-a Scheduler also has the 
following properties, similar to the properties of the version of the A-h-k-a Scheduler de- 
scribed earlier : 

[0335] Property 1. Each P-g process p's execution can only be delayed by A-h-k-a pro- 
cesses that have less latitude than p's latitude. A P-g process will never be delayed by any 
A-h-k-a process that has a greater or equal latitude. 

[0336] Property 2. Any A-h-k-a process a\ cannot be blocked by more than one critical 
section belonging to A-h-k-a processes that have deadlines greater than a,'s deadline. 

[0337] Property 3. No deadlocks can ever occur. 

[0338] Property 4. Each P-g process p will always be completed on or before e(p), that 
is, the end of the time slot allocated to p in the pre-run-time schedule. 

Example 14 

[0339] Suppose that a multiprocessor system consists of two processors, two asynchronous 
processes with hard deadlines and known characteristics (A-h-k processes): ua and cle\ and 
3 periodic processes with hard deadlines and known characteristics (P-h-k processes) pb, pc, 
and po as follows. 



a A : 


Ca A 


= 2,d aA = 


8,min aA = 8; 




a E : 




= 2, d a , = 


14, min ai = 1,000; 




Pb'- 


r PB 


= l> c Pfl = 


3,d pg = 4,prd PB = 


6,0 < o PB < 3; 


PC- 


r Pc 


= 0,c pc = 


l,d pc = 2,prd pc = 


4; o PD = 0; 


PD- 


r PD 


= 0,c PD = 


: l,d PD = l,prd PD = 


= 3, 0 < o PD < 4; 



[0340] It is assumed that the application requires that o Pc = 0, 0 < o PB < 3, and 0 < o PD < 
4, and asynchronous process ua may make its first request at time 0. It is also assumed that 
the application requires the following relations be satisfied: excludes p D , p D excludes a^, 
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a A excludes ps excludes a Ay p c excludes po, pd excludes p c , cie excludes ps, Pb ex- 
cludes a£\ 



[0341] Suppose that when converting a A to a periodic process, when determining d newpA : 

dnewp A = c aA + conversion .room{a A )\ 

the following formula was used in the conversion-room function: 



conversion-room{a A ) — 
Z Pj e(SpUS p )Ad Pj <d Xi r^FI *c PJ dx 

I ~ I + Za I"" rH * C aj 

m ajeS a Ad aj <d Xi A i+j mm *j 

[0342] where m is the number of processors. 
Then in the procedure for converting A-h-k processes into periodic processes, prior to en- 
tering the while loop, d newpA = c A + (c B + c c + c D )/m = 2 + [(2 + 1 + l)/2] = 4. After 
the second iteration of the while loop, d newpA — c A + \(cc + c D )/m] = 2 + [(1 + l)/2] = 3. 
prd newpA = (d A - d newpA + 1) = 8 — 3 + l = 6;0< o newpA < prd newpA -1=6-1 = 5. 
Suppose further that the system designer wanted to increase the chances of a A being con- 
verted into a periodic process, so the threshold^) was assigned a low value of 0.5. 
RPC newpA — c newpA f ' prd newpA = 2/6 = 0.33. 
RPCaj = c aA /min aj = 2/8 = 0.25. 

As threshold(a A ) *RPC newpA = 0.5 *0.33 < RPC aA — 0.25, the procedure will convert a A into 
a periodic process newp A . 

[0343] Suppose also that the system designer did not want a# to be converted into a pe- 
riodic process, so threshold^) was assigned a high value of 50. The procedure will not 
convert qe into a periodic process. 

[0344] If the method in [[Xu93]] the aforenoted 1993 article by Xu was used by the pro- 
cedure for constructing a feasible pre-run-time schedule for a given pre-run-time schedule 
with offsets, it will find the feasible schedule for newp A , p B , pc> and /?£>, on two processors 
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illustrated in Fig. [20] 21, when the offsets are set to the following values: o newpA = 2, o PB 
= 3, and o PD = 1. The feasible schedule consists of a non-repeating initial schedule So(l) 
for the interval [0,1], and a repeating schedule Slcm(12) that is of length equal to the Least 
Common Multiple of the periods of newp Aj p B , pc, and p D , which is LCM(6, 6, 4, 3) = 12. 

[0345] If a E is scheduled by the Multiple Processor A-h-k-a Scheduler using the infor- 
mation in the pre-run-time schedule including the processes newp A , pb, Pc> Pd constructed 
by the Pre-run-time Scheduler above, then a^'s worst-case response time will happen when 
a E makes a request at time 3, and will be delayed by the conditions in Case 1 of the Multiple 
Processor A-h-k-a Scheduler at time 3. a E will be executed from time 13 to time 15 after p Bx 
has completed. The multiple processor simulation procedure for determining each A-h-k-a 
process' worst-case response time will simulate this execution in which a E $ worst-case re- 
sponse time is RE(a E ,t s ) = RE(a E ,3) = c\a E ) - s\a E ) = 15 - 3 = 12 < d aE = 14. In this case 
a E is guaranteed to always meet its deadline. See Fig. [21] 22. 

[0346] Suppose the value chosen for threshold{a A ) is greater than 0.75, then A-h-k pro- 
cess a A will not be converted into a new periodic process. If a A is scheduled by the Multiple 
Processor A-h-k-a Scheduler using the information in the pre-run-time schedule including 
the processes, ps, pc, Pd constructed by the Pre-run-time Scheduler above, then a A s worst- 
case response time will happen when a A makes a request at time 3, and will be delayed by 
the conditions in Case 1 of the Multiple Processor A-h-k-a Scheduler at time 3. a A will be 
executed from time 8 to time 10 after po 2 has completed, a^'s response time is RE(a A ,t s ) = 
RE(a A ,3) = e\a A ) - s\a A ) = 10 - 3 = 7 < d QA = 14. In this case a A is guaranteed to always 
meet its deadline. See Fig. [22] 23. 

However, while it is possible to guarantee that both a A and a E will always meet their respec- 
tive deadlines when a A is converted into a new periodic process newp A as illustrated in Fig. 
[21] 22; it is interesting to note that, if a A is not converted into a new periodic process and 
remains asynchronous, then it would be impossible to guarantee that a E will always meet its 
deadline, because there exist certain times, e.g., any time between 13 and 16, at which, if a E 
is put into execution, it may be preempted by a A and cause p B to miss its deadline. Prohibit- 
ing a A from preempting a E by adding the exclusion relation a E excludes a A is not a solution, 
because not allowing a A to preempt a E will increase a A s worst-case response time to ex- 
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ceed <za j s deadline. This example illustrates that, in certain cases, it may be advantageous to 
convert an asynchronous process with a hard deadline and known characteristics into a new 
periodic process and schedule it before run-time, 
underline □ 
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[0347] It should be noted that various other embodiments of the present invention may be 
designed. 

[0348] For example, tables of safe start time intervals for asynchronous processes may be 
used. 

[0349] In the methods described prior to the above description of scheduling processes 
on multiple processors, each periodic process was not restricted to execute within the time 
slot that was used to reserve processor capacity for that periodic process in the pre-run-time 
schedule. 

[0350] However, it is possible to enforce the requirement that every periodic process must 
execute strictly within its reserved time slot in the pre-run-time schedule, simply by changing 
each periodic process p's release time R p to be equal to the beginning of its time slot in the 
pre-run-time schedule, i.e., set R p = s(p) for every p. 

[0351] One advantage of doing this, is that it will make the execution times of periodic 
processes highly predictable, and thus allow one to construct tables of "safe start time inter- 
vals" for asynchronous processes before run-time. Such tables would allow asynchronous 
processes to be scheduled at run-time by simple table lookup, and substantially reduce the 
run-time overhead of scheduling asynchronous processes. 

[0352] The safe start time intervals can be computed by using the A-h-k-a Scheduler (or 
Multiple Processor A-h-k-a Scheduler) to determine, for each point in time t of the pre-run- 
time schedule, and for each processor k y whether each asynchronous process can be put 
into execution at time t on processor k. 

Example 15 

[0353] For the asynchronous processes a E > in the system is Example 14, the following 
"safe start time tables" may be constructed. 
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[0354] When a& is converted into a new periodic process newpA, and the pre-run-time 
schedule is as shown in Figure 21, the safe start time table for ue should preferably contain 
the following "safe start time intervals": 
on processor 1: empty; 

on processor 2: [(k * 12) + 1 , (k * 1 2) + 2] ,k = 0, 1 , 2, . . . 

[0355] When ua is not converted into a new periodic process, and the pre-run-time sched- 
ule is as shown in Figure 22, the safe start time table for ua should preferably contain the 
following "safe start time intervals": 
on processor 1: [(£*6)+2],fc = 0,1,2,... 
on processor 2: [(k * 12) + 2] , Ic = 0, 1 , 2, . . . 

[0356] When cla is not converted into a new periodic process, and the pre-run-time sched- 
ule is as shown in Figure 22, the safe start time table for ag should preferably contain the 
following "safe start time intervals": 
on processor 1: empty; 
on processor 2: empty; 

[0357] The safe start time intervals define the only times at which an asynchronous pro- 
cess can start its execution on a processor when the processor is idle without the possibility 
of causing some hard deadline process to miss its deadline. 

□ 

[0358] Many priority and or criticality levels may be handled. One can easily adapt the 
present invention to handle any number of priority/criticality levels. 

[0359] If some set of periodic processes is to be treated at the same priority as some set 
of asynchronous processes, then they could be scheduled in a way similar to the way P-h-k 
processes and A-h-k processes have been scheduled as described earlier. 

[0360] If some set of periodic processes is to be treated at a higher priority than some set 
of asynchronous processes, then they could be scheduled in a way similar to the way P-h-k 
processes and A-s-k processes have been scheduled as described earlier. 
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[0361] If some set of periodic processes is to be treated at a lower priority than some set 
of asynchronous processes, then they could be scheduled in a way similar to the way P-s-k 
processes and A-h-k processes have been scheduled as described earlier. 

[0362] If some set of periodic processes is to be treated at a lower priority than some 
other set of periodic processes, then they could be scheduled in a way similar to the way [I 
scheduled] P-s-k processes and P-h-k processes have been scheduled as described earlier. 

[0363] If some set of asynchronous processes is to be treated at lower priority than some 
other set of asynchronous processes, then they could be scheduled in a way similar to the way 
A-s-k processes and A-h-k processes have been scheduled as described earlier. 

[0364] For example, although in this specification A-s-k processes are described as hav- 
ing been scheduled at a priority level that is lower than P-s-k processes, a different set of 
asynchronous processes with soft deadlines and known characteristics, say A-s-k-2, could 
have been chosen, that is scheduled at the same priority level as the P-s-k processes. Then the 
relationship between the A-s-k-2 processes and the P-s-k processes could be handled in a way 
that is similar to the way the relationship between the A-h-k and P-h-k processes was handled. 

[0365] When using the integration method to schedule processes with different priority 
levels, the following general rules should be observed: 

[0366] (a) Periodic processes with known characteristics should be scheduled before run- 
time. The worst-case response times of asynchronous processes with known characteristics 
should also be determined before run-time. At run-time, the asynchronous processes should 
be scheduled in a way that guarantees that the timing constraints of all processes scheduled in 
the pre-run-time phase are always satisfied. Processes with unknown characteristics should be 
scheduled at a priority level that is lower than that of all processes with known characteristics. 

[0367] (b) One should schedule the set of processes that have higher priority first and 
make sure that all their timing constraints are satisfied, before using the remaining processor 
capacity to schedule a set of processes that have lower priority. 
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[0368] In the present invention, different methods for scheduling each type of processes, 
while observing the general rules above, may be used. 

[0369] The present invention can also be used in an on-line mode. In such cases, in Step 
2, when constructing a feasible pre-run-time schedule, when using [the method] a single 
processor method such as that described in the aforenoted 1990 article by Xu and Parnas, 
or when using a multiprocessor method such as that described in the aforenoted 1993 article 
by Xu, instead of constructing a search tree, the method can be used in a way such that it 
always only constructs one schedule for each set of processes, which should be as fast as any 
existing method, and still provide better chances of finding a feasible pre-run-time schedule 
than other methods. 



118 



[0370] As noted earlier, a simplified procedure for Step 4, pre-run-time scheduling of pe- 
riodic processes with soft deadlines and known characteristics, will now be described. 
[In order to to try to find a feasible schedule of all soft-deadline periodic processes together 
with all the guaranteed hard-deadline periodic processes using the optimal method, if a fea- 
sible schedule does not exist, then find an optimal schedule.] 

P-s-k Scheduler Method 

Try to find a feasible schedule of all soft-deadline periodic processes 
together with all the guaranteed hard-deadline periodic processes 
using the optimal method in the aforenoted 1990 article by 
Xu and Parnas. 

If a feasible schedule does not exist, then find an optimal schedule 
discontinues false; 
nocandidate:= false; 
while not discontinue do 
begin{try to construct a feasible schedule} 

if e'(p/) - D pi = max{e'(A-) - D Pi \ Pi e P-h-k V Pi e P-s-k} and e'(p/) > D pi 
{pi is the latest process and pi is late} 

then 

begin{try to reduce the lateness of latest process pi} 
candidatefound:= false; 
CandidateSet:= P-s-k 

while not candidatefound and not nocandidate do 

begin{search for candidate to revise deadline} 
select pj such that 

pj e CandidateSet A d PJ < d upplimit{pj) A 

criticality(py) = min{criticality(/?; ) | p t in critical set Z(p/)} 

{Z(pi) is a set of processes that includes the latest 

process pi and there is no time during which the processor 

is idle between their execution, [(see [24])] 

(see aforenoted 1990 article by Xu and Parnas)} 
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if no such pj exists then 
nocandidate:= true; 

else 
begin 

ife'(«)+l< dupplimit(pj) 

then 

begin 

then d Pj :=e'(pt) + 1 

{this will cause pj to 
be scheduled after p\ 
which may help reduce lateness} 

else</^.:=e'(/?/); 

{if pj itself is latest 

then set d Pj such 

that pj will not be late} 

candidatefound;= true 

end 

else remove pj from CandidateSet 
{scheduling pj after pi 
is futile} 

end; 

end{ search for candidate to revise deadline}; 

if nocandidate 

then 

begin 

output Z(pi); 
discontinues true; 

{the user must modify the 

characteristics of one or more 

processes in Z(pi) before 

a feasible schedule can be found} 
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end 
else 
begin 

Use the [optimal] aforenoted algorithm [in [24]] to try to find 

a feasible schedule again with the revised d Pj ; 

if feasible does not exist, then find an optimal schedule; 

end; 

end{try to reduce the lateness of latest process pi) 

else discontinues true; {feasible schedule found} 
end{try to construct a feasible schedule}; 
{Verify the schedulability of all A-h-k-a processes} 
for each a\ € A-h-k-a do 

if not discontinue 

then 

begin 

while RE a . > L ai and not discontinue do 
begin 

let CandidateSet:= { pj \ pj e P-s-k A L Pj < L ai ] 
select pj such that pj G CandidateSet and 

criticality(py) = min{criticality(/?,) | p\ G CandidateSet 
A di < d upp u mit ( p .)} 
if no such pj exists then 

discontinues true; 

{the user must increase the deadline upper limit of some 
P-s-k process in CandidateSet} 

else 

d Pj :-d Pj + U 
end; {while} 
end; {for} 

end. 
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[0371] A method and a simulation procedure for determining the worst-case response 
times of the A-s-k processes, for example a,- follows: 

For all cti G A-s-k: 

KE ai = c ai + DelayA(fl f ,/JE fli ) + DelayP(a/,/JE fl .) + B(a/) 
where 

RE 

VeldyA(ai,REa i ) = 2v je A-h-kV{aj€A-s-^^ T^rl ' c aj) 

and 

^\^{a u RE ai )^ Pj£ P~h~ky Pj eP-s-k T^l -c Pj 

and 

B(ai) = max{c aj \ (aj € A-s-k A L aj > L Qi 

ABxfoXk G A-s-k: aj excludes Xk A L Xk < L ai )} 

Note: In the above formula, the value of c Pj is the original computation time of pj (it does 
not include the time reserved for A-h-k-a processes with shorter deadlines). 

[0372] The following procedure can be used to compute the worst-case response time of 
each A-s-k process: 

i:=0; 

failure= false; 

while i < number-of-A-s-k-processes and not(failure) do 
begin 

if a; G A-s-k 

then 

begin 

RE neWi \~ c a[ \ 

response timefound:= false; 

while not(responsetimefound) and not(failure) do 

begin 

RE new . = DelayA(a h RE P reviou Si ) + Dc\eiyP(a h RE previouSi ) + B(a,); 
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if REp reviouSi — RE neWi 

then 

begin 

responsetimefound:= true; 

end 

if (RE neWi > responsetimelimit) 
then failure:= true 

end; 

end; 

i:=i + 1; 

end 

[0373] See Example 9 [for] concerning use of the above procedure. 

[0374] In the following description, the second method is described, which uses simula- 
tion to determine the worst-case response time of an A-s-k process. 

[0375] This method uses the functions of the A-h-k-a Scheduler and the Main Run-Time 
Scheduler, which are described earlier. 

[0376] A preferred method for computing the worst-case response time of an A-s-k pro- 
cess a/ corresponding to a feasible pre-run-time schedule of guaranteed periodic processes 
comprising an initial part of the pre-run-time schedule So('o), in the interval [{0, to}] under- 
line [0, to]; and a repeating part of the pre-run-time schedule SztmO^^m), in the interval 
[{'o,'o + prdjjcM]] [to, tp + prducM] is as follows: 

fail:= false; 

for t s := 0 to to + prd^M - 1 do 
begin 

Use the Main Run-Time Scheduler to schedule a, under the 
following assumptions: 
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(1) at arrives in the system at time t s . 



(2) Let every A-h-k-a process a } arrive 

at the following instants in time: R aj (k) = t s + Jc * min aj , 

k = 0, 1, 2, . . . , L^^-J > an d be scheduled before a;. 

{ all A-h-k-a processes arrive at the same time as a; at time t S9 and 

are put into execution before a,-.} 

(3) Let every A-s-k process such that L aj < L ai arrive 
at the following instants in time: R aj (k) = t s + k * min ap 

k = 0, 1, 2, ... , L^^J > an< 3 be scheduled before a/ whenever 
a/ and aj have both arrived and a t has not yet started. 
{ all A-s-k processes whose latitudes are less than or equal to 
a/'s latitude arrive at the same time as a x at time t Sy and 
are put into execution before a,-.} 

(4) Let A-s-k process a/ p such that c ajl = max{c aj \(aj G A-s-k 

A L aj > L ai /\3x k ,x k G A-s-k Vx k G P-g: aj excludes x k A L Xk < L ai 
arrive at the following instants in time: R a . (k) = t s - 1 + k * min a 



{aj } arrives 1 time unit before a x at time t s -1 , and, 

if it can be put into execution at that time, it will block a,-.} 

(5) If 3pi,pi G P-g As(pt) < t s < e(pi) y then assume that 
^(Pi) — s (Pi)^ ef (Pi) = e (Pi)> {i- e - ? Pi started at the beginning of 
its time slot and will complete its computation at the end of 
its time slot in the pre-run-time schedule that was computed 
using adjusted computation times.} 
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(6) If the end of the current instance of the repeating part of the pre-run-time 
schedule is reached, continue at the beginning of the next instance of the repeating 
part of the pre-run-time schedule. 

(7) If a/'s computation is completed before its response time limit, 
then record the completion time of a\ as its response 

time RE{ai,t s ), and exit from the current iteration of the loop 
for this value of t S9 and start the next iteration for t s :~ t s + 1. 

(8) If a/s response time limit is reached but a t has not 

yet completed its computation, then set fail:= true and exit 
from the procedure. 

end; 

if not fail then 

RE ai := max{RE(a h t 5 ) | f, = 0, 1, ...,LCM- 1}; 
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[0377] It should be noted that while the above-described methods can be carried out in a 
software programmed processor, and have [beed] been described with such a processor as an 
example, they, or one or more steps in the methods, can can alternatively be carried out by 
hardware such as gate arrays or by other fixed or programmable structures, or combinations 
of these structures. 

[0378] A processor can be any physical or virtual structure which can perform one or 
more functions. A processor can be a machine, a computer processor, a logic device, an 
organization, etc. A process can be any task or job that requires a finite amount of time to 
complete on a certain processor. Computation time is the amount of time that a process re- 
quires from start to completion on a certain processor. 

[0379] Figure 24 illustrates an example of a system on which the methods described 
herein can be carried out. Any of plural peripherals 1 provide input signals which require 
processing. For example, peripherals can be a keyboard, a signal from an emergency re- 
sponse telephone system, an alarm clock, a program running in background on a processor, 
a pipeline, etc. A memory 3 stores processes, e.g. series of instructions, for carrying out 
the various processes. The memory can be in the form of any storage structure, and can be, 
for instance a store for a series of electronic, pneumatic, hydraulic, etc. control signals for 
operating a plurality of industrial processes that require scheduling in accordance with the 
demands of the input signals. In one embodiment, the memory can be a hard random access 
memory and/or a disk drive of a computer, of well known form and the input signals can be 
electronic. In another embodiment, in the case in which the memory is in the form of indus- 
trial process structures, the input signals can be fluids, photons, objects, audio, data or other 
signals, etc, which are to be scheduled to be processed by the various industrial processes. 

[0380] The input signals and the memory are coupled to a processor 4 of any form with 
which the present invention can be operated, such a computer processor. The processor has 
an output which is coupled to an output device or system 5, which receives the output result 
of the operation of the processes by the processor. 
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[0381] The memory preferably also has a portion 7 for storing a pre-run-time schedule, 
and a portion 9 for storing a run-time schedule for execution of the processes stored in the 
memory 3. 

[0382] In operation, the processor receives input signals which demand that processes 
stored in the memory 3 (or which are received from other control or interrupt inputs, not 
shown) are executed. As described earlier in this specification, some of these processes can 
be periodic and some can be asynchronous. The processor, operating using an operating 
system stored in the memory 3, obtains the characteristics of the various processes from the 
memory, and creates or simulates a pre-run-time schedule, then creates or simulates a run- 
time schedule which uses the pre-run-time schedule, as described earlier in this specification. 
It then executes the run-time schedule as described herein, providing an output to the output 
device or system. 

[0383] Figure 24A provides another example of a multiprocessor system on which the 
methods described herein can be carried out. The real-time system consists of a controlling 
system having two parts, a pre-run-time scheduling subsystem 10 and a run-time scheduling 
subsystem 11, and a controlled system 12. The controlled system 12 has data/control buses 
linking the various components. The controlled system 12 is comprised of a set of periodic 
processes p\ 9 p 2 , p n , a set of asynchronous processes a\, a 2 , a/, and one or more 
processors 13a, 13b, 13m. Each processor 13a - 13m may have local memory and shared 
memory. On each processor 13a - 13m the processes, either periodic or asynchronous, may 
be executed. Each process can be a task that requires a finite amount of time to complete on 
a processor that may have memory resources. Examples of such processes include: a service 
routine that periodically monitors conditions on a physical system and sends a signal when 
the conditions meet a certain standard or a task that responds to random user initiated re- 
quests. Any of the processes can be a complete subsystem unto itself comprising a processor 
and a memory that requires the use of some services offered by controlled system 12 in order 
to execute other periodic or asynchronous processes. 

[0384] The pre-run-time scheduling subsystem 10 consists of one or more processors 14 
that are used to perform pre-run-time scheduling. The pre-run-time scheduling subsystem 
scheduler (not shown) acquires information about the periodic processes such as constraints, 
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release time, deadline, offset, precedence, and exclusion relations. The scheduler then uses 
this information to determine whether each asynchronous process should be converted into a 
new periodic process or not. After converting any suitable subset of asynchronous processes 
into new periodic processes but before run-time of the processes, the pre-run-time sched- 
uler constructs a pre-run-time schedule for all the periodic processes which satisfies all the 
constraints and relations defined on the periodic processes. The scheduler then makes this 
schedule available to the run- time scheduling subsystem 1 1. 

[0385] The run-time scheduling subsystem 11 consists of one or more processors 15 
that are used to perform run- time scheduling of the periodic and asynchronous processes. 
The run-time scheduling subsystem 11 uses the information 16 provided by the pre-run-time 
scheduler and stored in memory, to schedule the processes for execution on processor(s) 15. 
The processors 13a - 13m in the controlled system 12 on which the periodic or asynchronous 
processes are executed may share memory and other resources. Consequently, it is important 
[to] to enforce exclusion relations on the execution of the processes to prevent more than 
one process from accessing a shared memory resource at the same time. The pre-run time 
scheduling subsystem 10 and the run-time scheduling subsystem 1 1 work together to control 
the execution of all the processes in the controlled system 12. These two subsystems 10 and 
1 1 guarantee that all the processes in the controlled system 12 are completed before their re- 
spective deadlines and that all the constraints and relations among the processes are satisfied. 

[0386] While Figure 24A shows the run-time scheduling subsystems 1 1 as being within 
the controlled system 12, this is not necessary for the proper working of the invention. The 
run-time scheduling subsystem 1 1 can be separate from the controlled system 12. 

[0387] Some applications of the present invention can be in aircraft flight control, plant 
process control, traffic control, communication systems, multimedia, signal control of the in- 
ternet, electronic commerce, electronic buses, computer operation, etc. 

[0388] A person understanding the above-described invention may now conceive of alter- 
native designs, using the principles described herein. All such designs which fall within the 
scope of the claims appended hereto are considered to be part of the present invention. 
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